CVE-2016-3862 in Android

Sumário (Inglês)

media/ExifInterface.java in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 does not properly interact with the use of static variables in libjhead_jni, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 29270469.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservar

30/03/2016

Divulgação

11/09/2016

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
91416	Google Android Mediaserver Excesso de tampão	119	Não definido	Correção oficial	CVE-2016-3862

Fontes

• MITRE
• NVD
• CVE Details