CVE-2016-6702
First published: Mon Nov 07 2016(Updated: )
A remote code execution vulnerability in libjpeg in Android 4.x before 4.4.4, 5.0.x before 5.0.2, and 5.1.x before 5.1.1 could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses libjpeg. Android ID: A-30259087.
Credit: security@android.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Android | ||
| Android | =4.0 | |
| Android | =4.0.1 | |
| Android | =4.0.2 | |
| Android | =4.0.3 | |
| Android | =4.0.4 | |
| Android | =4.1 | |
| Android | =4.1.2 | |
| Android | =4.2 | |
| Android | =4.2.1 | |
| Android | =4.2.2 | |
| Android | =4.3 | |
| Android | =4.3.1 | |
| Android | =4.4 | |
| Android | =4.4.1 | |
| Android | =4.4.2 | |
| Android | =4.4.3 | |
| Android | =5.0 | |
| Android | =5.0.1 | |
| Android | =5.1 | |
| Android | =5.1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-6702?
CVE-2016-6702 is rated as High due to the potential for remote code execution in unprivileged processes.
How can I mitigate CVE-2016-6702?
To mitigate CVE-2016-6702, update your Android device to a version later than 5.0.2 or 5.1.1.
What versions of Android are affected by CVE-2016-6702?
CVE-2016-6702 affects Android versions 4.x before 4.4.4, 5.0.x before 5.0.2, and 5.1.x before 5.1.1.
What type of vulnerability is CVE-2016-6702?
CVE-2016-6702 is a remote code execution vulnerability in the libjpeg library.
Who is at risk from CVE-2016-6702?
Users of the affected versions of Android are at risk of exploitation through specially crafted files.
- agent/type
- agent/first-publish-date
- agent/references
- agent/author
- agent/severity
- agent/weakness
- agent/description
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/source
- agent/tags
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/google
- canonical/android
- version/android/4.0
- version/android/4.0.1
- version/android/4.0.2
- version/android/4.0.3
- version/android/4.0.4
- version/android/4.1
- version/android/4.1.2
- version/android/4.2
- version/android/4.2.1
- version/android/4.2.2
- version/android/4.3
- version/android/4.3.1
- version/android/4.4
- version/android/4.4.1
- version/android/4.4.2
- version/android/4.4.3
- version/android/5.0
- version/android/5.0.1
- version/android/5.1
- version/android/5.1.0