CVE-2016-0835

Critical

Published: 18/04/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The decoder/impeg2d_dec_hdr.c in mediaserver in Android 6.x before April 1, 2016, has a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file that triggers a certain negative value.

Risk Assessment

This vulnerability could lead to remote code execution, posing a serious security threat to the system and user data. It may also result in service outages related to media playback.

Recommendation

It is recommended to update the Android system to a version after April 1, 2016, to mitigate this vulnerability. Additionally, files should be monitored and verified before playback.

Original NVD description (English source)

decoder/impeg2d_dec_hdr.c in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file that triggers a certain negative value, aka internal bug 26070014.