CVE Catalog

CVE-2016-0816

Critical
Published: Translated: NVD NIST

Summary

A vulnerability in mediaserver in Android 6.x before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.

Risk Assessment

Attackers can exploit this vulnerability to gain control over the device or disrupt its operation, potentially leading to serious consequences for users and organizations.

Recommendation

It is recommended to update the Android system to a version after 2016-03-01 to mitigate this vulnerability and to monitor devices for suspicious activity.

Original NVD description (English source)

mediaserver in Android 6.x before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, related to decoder/ih264d_parse_islice.c and decoder/ih264d_parse_pslice.c, aka internal bug 25928803.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS