CVE-2016-10393
CRITICALAndroid - Buffer Overflow via Large Clip Size Integer Arithmetic
Title source: llmDescription
In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when processing a clip with large size values, integer arithmetic overflows, and allocated buffer size will be less than intended buffer size. The following buffer operations will overflow the allocated buffer.
References (2)
Core 2
Core References
Vendor Advisory x_refsource_confirm
https://source.android.com/security/bulletin/2018-03-01
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/103292
Scores
CVSS v3
9.8
EPSS
0.0088
EPSS Percentile
54.4%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-119
CWE-190
Status
published
Products (1)
google/android
Published
Mar 15, 2018
Tracked Since
Feb 18, 2026