CVE-2016-0816
CriticalSummary
A vulnerability in mediaserver in Android 6.x before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.
Risk Assessment
Attackers can exploit this vulnerability to gain control over the device or disrupt its operation, potentially leading to serious consequences for users and organizations.
Recommendation
It is recommended to update the Android system to a version after 2016-03-01 to mitigate this vulnerability and to monitor devices for suspicious activity.
Original NVD description (English source)
mediaserver in Android 6.x before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, related to decoder/ih264d_parse_islice.c and decoder/ih264d_parse_pslice.c, aka internal bug 25928803.

