CVE-2016-2413 in Android

Riassunto

di MITRE

media/libmedia/IOMX.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not initialize a handle pointer, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26403627.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Prenotare: 18/02/2016
• Divulgazione: 17/04/2016
• Moderazione: accettato
• Voce: VDB-81592
• CPE: pronto
• CWE: CWE-264 (confermato)
• CVSS: 7.8 (NVD)
• EPSS: 0.00473
• KEV: no
• Attività: molto basso
• Settore: Insurance, Homeoffice, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-2413
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-2413
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-2413/