CVE-2016-3827
MEDIUMAndroid <6.0.1 - DoS
Title source: llmDescription
codecs/hevcdec/SoftHEVC.cpp in libstagefright in mediaserver in Android 6.0.1 before 2016-08-01 mishandles decoder errors, which allows remote attackers to cause a denial of service (device hang or reboot) via a crafted media file, aka internal bug 28816956.
Scores
CVSS v3
5.5
EPSS
0.0019
EPSS Percentile
40.9%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Classification
CWE
CWE-172
Status
draft
Affected Products (1)
google/android
< 6.0.1
Timeline
Published
Aug 05, 2016
Tracked Since
Feb 18, 2026