CVE-2016-3745
CriticalSummary
Multiple buffer overflows in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attackers to gain privileges via a crafted application that provides an AudioEffect reply.
Risk Assessment
Attackers can gain access to Signature or SignatureOrSystem privileges, potentially leading to serious security breaches in the system.
Recommendation
It is recommended to update the Android system to the latest version to mitigate this vulnerability and to monitor applications using AudioEffect.
Original NVD description (English source)
Multiple buffer overflows in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attackers to gain privileges via a crafted application that provides an AudioEffect reply, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 28173666.