PT-2016-1589

CVE-2016-0816

·

Publicado

2016-03-12

·

Atualizado

2016-11-28

Descrição por

CVSS 3.1
10
Crítica
MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-03-01
Description The issue allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, related to decoder/ih264d parse islice.c and decoder/ih264d parse pslice.c. This is caused by a buffer overflow in the mediaserver component of the Android operating system.
Recommendations For Android versions prior to 2016-03-01, update the operating system to a version released after 2016-03-01 to resolve the issue. As a temporary workaround, consider restricting the use of media files from untrusted sources to minimize the risk of exploitation.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾