CVE-2016-0835: Buffer Overflow

Published Apr 18, 2016

Updated

decoder/impeg2ddechdr.c in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file that triggers a certain negative value, aka internal bug 26070014.

Affected Software

2 affected components

Google Android=6.0

Google Android=6.0.1

Event History

Apr 18, 2016

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-0835?

CVE-2016-0835 is classified as a critical vulnerability due to its potential to allow remote code execution.

How do I fix CVE-2016-0835?

To fix CVE-2016-0835, update your Android device to the latest security patch released after April 1, 2016.

What types of attacks can CVE-2016-0835 lead to?

CVE-2016-0835 can lead to arbitrary code execution or a denial of service through memory corruption.

Which Android versions are affected by CVE-2016-0835?

CVE-2016-0835 affects Android versions 6.0 and 6.0.1 prior to the security update on April 1, 2016.

Is there a known exploit for CVE-2016-0835?

While there are no public exploits specifically detailed for CVE-2016-0835, its nature allows for potential exploitation via crafted media files.