Google Android up to 4.4.3/5.0.1/5.1.0/6.x mediaserver memory corruption

Summaryinfo

A vulnerability labeled as problematic has been found in Google Android up to 4.4.3/5.0.1/5.1.0/6.x. This vulnerability affects unknown code of the component mediaserver. Such manipulation leads to memory corruption. This vulnerability is referenced as CVE-2016-2481. No exploit is available. The affected component should be upgraded.

Detailsinfo

A vulnerability, which was classified as critical, has been found in Google Android up to 4.4.3/5.0.1/5.1.0/6.x (Smartphone Operating System). Affected by this issue is an unknown part of the component mediaserver. The manipulation with an unknown input leads to a memory corruption vulnerability. Using CWE to declare the problem leads to CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. Impacted is confidentiality, integrity, and availability. CVE summarizes:

The mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27532497.

The weakness was published 06/13/2016 as 27532497 as confirmed advisory (Website). The advisory is shared for download at android.googlesource.com. This vulnerability is handled as CVE-2016-2481 since 02/18/2016. The attack needs to be approached locally. A simple authentication is necessary for exploitation. There are neither technical details nor an exploit publicly available.

The vulnerability scanner Nessus provides a plugin with the ID 264249 (Linux Distros Unpatched Vulnerability : CVE-2016-2481), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 4.4.4, 5.0.2, 5.1.1 or 6.x 2016-06-01 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (264249). Similar entries are available at VDB-87840, VDB-87841, VDB-87842 and VDB-87843. Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Smartphone Operating System

Vendor

• Google

Name

• Android

Version

• 1.0
• 1.1
• 1.5
• 1.6
• 2.0
• 2.0.1
• 2.1
• 2.2
• 2.2.1
• 2.2.2
• 2.2.3
• 2.3
• 2.3.1
• 2.3.2
• 2.3.3
• 2.3.4
• 2.3.5
• 2.3.6
• 2.3.7
• 3.0
• 3.1
• 3.2
• 3.2.1
• 3.2.2
• 3.2.3
• 3.2.4
• 3.2.5
• 3.2.6
• 4.0
• 4.0.1
• 4.0.2
• 4.0.3
• 4.0.4
• 4.1
• 4.1.1
• 4.1.2
• 4.2
• 4.2.1
• 4.2.2
• 4.3
• 4.3.1
• 4.4
• 4.4.1
• 4.4.2
• 4.4.3
• 4.4.4
• 5.0
• 5.0.1
• 5.1.0
• 6.x

License

• free

Website

• Vendor: https://www.google.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion