CVE-2016-6767: High severity Google Android vulnerability

Published Dec 5, 2016

Updated

A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4. Android ID: A-31833604.

Affected Software

18 affected components

Google Android=4.0

Google Android=4.0.1

Google Android=4.0.2

Google Android=4.0.3

Google Android=4.0.4

Google Android=4.1

Google Android=4.1.2

Google Android=4.2

Google Android=4.2.1

Google Android=4.2.2

Google Android=4.3

Google Android=4.3.1

Google Android=4.4

Google Android=4.4.1

Google Android=4.4.2

Google Android=4.4.3

Google Android=4.4.4

Google Android

Event History

Dec 5, 2016

CVE Published

via Android·12:00 AM

Jan 12, 2017

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

DescriptionWeakness

Data Sourced

via NVD·03:59 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2016-6767?

The severity of CVE-2016-6767 is rated as High due to the potential for remote denial of service.

How can I mitigate CVE-2016-6767?

Mitigation of CVE-2016-6767 can be achieved by updating affected Android devices to the latest security patch release.

What versions of Android are affected by CVE-2016-6767?

CVE-2016-6767 affects Android versions from 4.0 to 4.4.4.

Can CVE-2016-6767 be exploited remotely?

Yes, CVE-2016-6767 can be exploited remotely through specially crafted files that cause the device to hang or reboot.

Is there a patch available for CVE-2016-6767?

Yes, patches for CVE-2016-6767 are available in the Android security bulletin and should be applied to affected devices.