CVE-2016-3823

High

Published: 05/08/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The secure-session feature in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 mishandles heap pointers, allowing attackers to gain privileges via a crafted application.

Risk Assessment

This vulnerability may lead to privilege escalation on Android systems, posing a serious threat to user data security and system integrity.

Recommendation

It is recommended to update the Android system to the latest version to mitigate this vulnerability and to monitor installed applications on devices.

Other vulnerabilities in mm-video-v4l2 venc

CVE-2016-2481High
The mm-video-v4l2 venc component in mediaserver in Android before versions 4.4.4, 5.0.2, 5.1.1, and 6.x before June 1, 2016 mishandles a buffer count. This allows attackers to gain privileges via a crafted application.

Original NVD description (English source)

The secure-session feature in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 mishandles heap pointers, which allows attackers to gain privileges via a crafted application, aka internal bug 28815329.