CVE-2016-2417
CRITICALAndroid < 4.4.4/5.0.2/5.1.1/2016-04-01 - Information Disclosure via Uninitialized Data
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2016-2417. PoCs published by Google Security Research.
AI-analyzed exploit summary The exploit leverages an information disclosure vulnerability in Android's IOMX component (CVE-2016-2417), where uninitialized heap memory is returned due to insufficient validation in GET_CONFIG/GET_PARAMETER calls. The PoC demonstrates reading 64 bytes (with 56 bytes uninitialized) from the media server process, potentially aiding in ASLR bypass.
Description
media/libmedia/IOMX.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not initialize a parameter data structure, which allows attackers to obtain sensitive information from process memory, and consequently bypass an unspecified protection mechanism, via unspecified vectors, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26914474.
Exploits (1)
The exploit leverages an information disclosure vulnerability in Android's IOMX component (CVE-2016-2417), where uninitialized heap memory is returned due to insufficient validation in GET_CONFIG/GET_PARAMETER calls. The PoC demonstrates reading 64 bytes (with 56 bytes uninitialized) from the media server process, potentially aiding in ASLR bypass.
References (3)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H