CVE-2016-3870 in Android

Resumen (Inglés)

omx/SimpleSoftOMXComponent.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 does not prevent input-port changes, which allows attackers to gain privileges via a crafted application, aka internal bug 29421804.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservar

2016-03-30

Divulgación

2016-09-11

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
91418	Google Android Mediaserver escalada de privilegios	264	No está definido	Arreglo oficial	CVE-2016-3870

Fuentes

• MITRE
• NVD
• CVE Details