CVE-2016-6702
HighSummary
A remote code execution vulnerability in libjpeg in Android 4.x before 4.4.4, 5.0.x before 5.0.2, and 5.1.x before 5.1.1 could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process.
Risk Assessment
This issue is rated as High due to the possibility of remote code execution in an application that uses libjpeg, which could lead to serious security breaches.
Recommendation
It is recommended to update the Android system to the latest version to mitigate this vulnerability and to monitor applications using libjpeg for potential attacks.
Other vulnerabilities in libjpeg
See all- CVE-2016-3616High
The cjpeg utility in libjpeg allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or execute arbitrary code via a crafted file.
- CVE-2023-37837Medium
A heap buffer overflow was discovered in the libjpeg library in the LineBitmapRequester::EncodeRegion function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.
- CVE-2023-37836Medium
A vulnerability in the libjpeg library was discovered that allows for a reachable assertion in the BitMapHook::BitMapHook method in bitmaphook.cpp. This vulnerability can be exploited by attackers to cause a Denial of Service (DoS) via a crafted file.
Original NVD description (English source)
A remote code execution vulnerability in libjpeg in Android 4.x before 4.4.4, 5.0.x before 5.0.2, and 5.1.x before 5.1.1 could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses libjpeg. Android ID: A-30259087.