← Retour aux CVEs

CVE-2016-0824

N/A

Description

libmpeg2 in libstagefright in Android 6.x before 2016-03-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via crafted Bitstream data, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 25765591.

Details CVE

Score CVSS v3.1N/A

Publie3/12/2016

Derniere modification4/12/2025

Sourcenvd

Observations honeypot0

Produits affectes

google:android

Faiblesses (CWE)

CWE-200CWE-254

References

http://source.android.com/security/bulletin/2016-03-01.html(security@android.com)

http://www.securityfocus.com/bid/84262(security@android.com)

https://android.googlesource.com/platform/external/libmpeg2/+/ffab15eb80630dc799eb410855c93525b75233c3(security@android.com)

http://source.android.com/security/bulletin/2016-03-01.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/84262(af854a3a-2127-422b-91ae-364da2661108)

https://android.googlesource.com/platform/external/libmpeg2/+/ffab15eb80630dc799eb410855c93525b75233c3(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.