CVE Vulnerabilities

CVE-2016-6765

Published: Jan 12, 2017 | Modified: Jan 19, 2017
CVSS 3.x
5.5
MEDIUM
Source:
NVD
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.x
7.1 HIGH
AV:N/AC:M/Au:N/C:N/I:N/A:C
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

A denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 7.0. Android ID: A-31449945.

Affected Software

Name Vendor Start Version End Version
Android Google 4.0 (including) 4.0 (including)
Android Google 4.0.1 (including) 4.0.1 (including)
Android Google 4.0.2 (including) 4.0.2 (including)
Android Google 4.0.3 (including) 4.0.3 (including)
Android Google 4.0.4 (including) 4.0.4 (including)
Android Google 4.1 (including) 4.1 (including)
Android Google 4.1.2 (including) 4.1.2 (including)
Android Google 4.2 (including) 4.2 (including)
Android Google 4.2.1 (including) 4.2.1 (including)
Android Google 4.2.2 (including) 4.2.2 (including)
Android Google 4.3 (including) 4.3 (including)
Android Google 4.3.1 (including) 4.3.1 (including)
Android Google 4.4 (including) 4.4 (including)
Android Google 4.4.1 (including) 4.4.1 (including)
Android Google 4.4.2 (including) 4.4.2 (including)
Android Google 4.4.3 (including) 4.4.3 (including)
Android Google 4.4.4 (including) 4.4.4 (including)
Android Google 5.0 (including) 5.0 (including)
Android Google 5.0.1 (including) 5.0.1 (including)
Android Google 5.0.2 (including) 5.0.2 (including)
Android Google 5.1 (including) 5.1 (including)
Android Google 5.1.0 (including) 5.1.0 (including)
Android Google 5.1.1 (including) 5.1.1 (including)
Android Google 7.0 (including) 7.0 (including)
Android Ubuntu esm-apps/xenial *
Android Ubuntu trusty *
Android Ubuntu vivid/stable-phone-overlay *
Android Ubuntu xenial *
Android Ubuntu yakkety *
Android Ubuntu zesty *

References