CVE-2016-6747: Medium severity Google Android vulnerability
A denial of service vulnerability in Mediaserver in Android before 2016-11-05 could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Android ID: A-31244612. References: NVIDIA N-CVE-2016-6747.
Affected Software
Event History
Frequently Asked Questions
What must an attacker do to trigger this issue?
The attacker must cause the device to process a specially crafted file. The CVSS vector indicates local access, no privileges required, and user interaction is required.
What is the practical impact of successful exploitation?
Successful exploitation can cause the Android device to hang or reboot, resulting in denial of service. The provided data does not indicate confidentiality or integrity impact.
Which Android devices are affected?
Android versions before 2016-11-05 are affected according to the provided data. Devices running a version that includes the relevant security update are not identified as affected.