CVE-2016-2478
HighSummary
The omx_vdec_msm8974.cpp file in mediaserver in Android has a pointer mishandling issue that may allow attackers to gain privileges via a crafted application.
Risk Assessment
Attackers may obtain Signature or SignatureOrSystem access, posing a serious threat to system security and user data.
Recommendation
It is recommended to update Android to version 4.4.4, 5.0.2, 5.1.1 or later to mitigate this vulnerability.
Other vulnerabilities in mediaserver in Android
See all- CVE-2016-2477High
The omx_vdec_msm8974.cpp file in mediaserver in Android has a pointer mishandling issue that allows attackers to gain privileges via a crafted application.
- CVE-2016-0840High
Multiple stack-based buffer underflows in decoder/ih264d_parse_cavlc.c in mediaserver in Android 6.x before 2016-04-01 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.
- CVE-2016-0828High
The BnGraphicBufferConsumer::onTransact function in mediaserver in Android 5.x before version 5.1.1 LMY49H and 6.x before March 1, 2016, does not initialize a certain slot variable. This allows attackers to obtain sensitive information and bypass an unspecified protection mechanism by triggering an ATTACH_BUFFER action.
- CVE-2016-0804Critical
The NuPlayer::GenericSource::notifyPreparedAndCleanup function in mediaserver in Android 5.x before version 5.1.1 LMY49G and 6.x before 2016-02-01 improperly manages mDrmManagerClient objects. This allows remote attackers to execute arbitrary code or cause a denial of service via a crafted media file.
Original NVD description (English source)
mm-video-v4l2/vidc/vdec/src/omx_vdec_msm8974.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles pointers, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27475409.