CVE-2016-0834: Input Validation

Published Apr 18, 2016

Updated

An unspecified media codec in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 26220548.

Affected Software

2 affected components

Google Android=6.0

Google Android=6.0.1

Event History

Apr 18, 2016

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-0834?

CVE-2016-0834 has a high severity due to the potential for remote code execution and denial of service.

How do I fix CVE-2016-0834?

To fix CVE-2016-0834, update your Android device to the latest security patch version provided by Google.

Which Android versions are affected by CVE-2016-0834?

CVE-2016-0834 affects Android versions 6.0 and 6.0.1 before the April 2016 security updates.

What impact does CVE-2016-0834 have on my device?

CVE-2016-0834 can allow remote attackers to execute arbitrary code or cause memory corruption, leading to a denial of service.

Is there a workaround for CVE-2016-0834?

There are no official workarounds for CVE-2016-0834; the recommended action is to apply the security update.