CVE-2016-6701: Buffer Overflow
A remote code execution vulnerability in libskia in Android 7.0 before 2016-11-01 could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as High due to the possibility of remote code execution within the context of the gallery process. Android ID: A-30190637.
Affected Software
Event History
Frequently Asked Questions
What must an attacker do to exploit this issue?
An attacker must induce processing of a specially crafted file. Exploitation relies on user interaction, as reflected by the CVSS UI:R vector.
What is the likely impact if exploitation succeeds?
The crafted file can trigger memory corruption and may allow remote code execution in the context of the gallery process. Confidentiality, integrity, and availability impacts are all rated High in the supplied CVSS vector.
Which Android releases are identified as affected?
The provided information identifies Android 7.0 releases before the 2016-11-01 security update as affected.