CVE-2016-3742
CriticalSummary
The decoder/ih264d_process_intra_mb.c file in mediaserver in Android 6.x before 2016-07-01 mishandles intra mode, allowing remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.
Risk Assessment
This vulnerability poses a risk of remote code execution and potential denial of service, which can lead to serious security implications for the system.
Recommendation
It is recommended to update the Android system to a version after 2016-07-01 to mitigate this vulnerability and to monitor media files before playback.
Other vulnerabilities in mediaserver
See all- CVE-2017-0541High
CVE-2017-0541 is a remote code execution vulnerability in Mediaserver that can lead to memory corruption during media file processing. An attacker can exploit this issue using a specially crafted file.
- CVE-2017-0474High
A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.
- CVE-2017-0473High
A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.
- CVE-2017-0472High
A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.
- CVE-2017-0471High
A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.
- CVE-2017-0470High
A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.
- CVE-2017-0469High
A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.
- CVE-2017-0468High
A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.
- CVE-2017-0467High
A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.
- CVE-2017-0466High
A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.
Original NVD description (English source)
decoder/ih264d_process_intra_mb.c in mediaserver in Android 6.x before 2016-07-01 mishandles intra mode, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28165659.