media/libmedia/IOMX.cpp vulnerabilities
3 known CVE vulnerabilities in media/libmedia/IOMX.cpp, translated and rated.
- CVE-2016-2413High
The IOMX.cpp file in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before April 1, 2016, does not initialize a handle pointer, allowing attackers to gain privileges via a crafted application.
- CVE-2016-2418Critical
The IOMX.cpp file in mediaserver in Android 6.x before 2016-04-01 does not initialize certain metadata buffer pointers, allowing attackers to obtain sensitive information from process memory.
- CVE-2016-2417Critical
The IOMX.cpp file in mediaserver in Android before version 4.4.4, 5.0.2, 5.1.1, and 6.x before April 1, 2016, does not initialize a parameter data structure, allowing attackers to obtain sensitive information from process memory.

