CVE-2016-2419
CriticalSummary
The IDrm.cpp file in mediaserver in Android 6.x before 2016-04-01 does not initialize a certain key-request data structure, allowing attackers to obtain sensitive information from process memory.
Risk Assessment
Attackers may bypass an unspecified protection mechanism, potentially leading to data leakage and security breaches.
Recommendation
It is recommended to update the Android system to a version after 2016-04-01 to mitigate this vulnerability.
Original NVD description (English source)
media/libmedia/IDrm.cpp in mediaserver in Android 6.x before 2016-04-01 does not initialize a certain key-request data structure, which allows attackers to obtain sensitive information from process memory, and consequently bypass an unspecified protection mechanism, via unspecified vectors, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26323455.