CVE-2016-3826 | Vulnetix

CVE-2016-3826 PUBLISHED

Reported by google_android · Published August 5, 2016

services/audioflinger/Effects.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 does not validate the reply size for an AudioFlinger effect command, which allows attackers to gain privileges via a crafted application, aka internal bug 29251553.

Affected products

Vendor	Product	Versions
n/a	n/a	n/a
n/a	n/a	*

Timeline

Aug 2, 2016 CVE Published
Feb 4, 2022 EPSS Score (30 in total, the first dated here)
Jun 1, 2026 Security Advisory
Oct 8, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2016-3826
vulnetix vdb fixes CVE-2016-3826

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2016-3826/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

x_refsource_CONFIRM
92218 vdb-entryx_refsource_BID
x_refsource_CONFIRM

Look up in the Resolve Platform →