CVE-2016-0824 PUBLISHED

libmpeg2 in libstagefright in Android 6.x before 2016-03-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via crafted Bitstream data, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 25765591.

EPSS 0.16% · 37.3th percentile

Risk Scores

EPSS Score
0.16%
37.3th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSandroid0, 20150818-1500-0ubuntu2, 20150818-1500-0ubuntu3

Timeline

References

Open in Interactive Console →