CVE-2016-0824
MEDIUMAndroid 6.x - Info Disclosure
Title source: llmDescription
libmpeg2 in libstagefright in Android 6.x before 2016-03-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via crafted Bitstream data, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 25765591.
Scores
CVSS v3
5.3
EPSS
0.0016
EPSS Percentile
37.2%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Classification
CWE
CWE-254
CWE-200
Status
draft
Affected Products (2)
google/android
google/android
Timeline
Published
Mar 12, 2016
Tracked Since
Feb 18, 2026