CVE-2016-6702

HIGH

Android < 4.4.4, 5.0.x < 5.0.2, 5.1.x < 5.1.1 - Remote Code Execution in libjpeg

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2016-6702. PoCs published by codecat007.

AI-analyzed exploit summary The repository provides a technical analysis of CVE-2016-6702, detailing an integer overflow vulnerability in libjpeg's `jpeg_open_backing_store` function, which can lead to remote code execution during JPEG decompression. It includes code snippets and a PoC command but lacks functional exploit code.

Description

A remote code execution vulnerability in libjpeg in Android 4.x before 4.4.4, 5.0.x before 5.0.2, and 5.1.x before 5.1.1 could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses libjpeg. Android ID: A-30259087.

Exploits (1)

github WRITEUP 8 stars
by codecat007 · cpoc
https://github.com/codecat007/cvehub/tree/main/android/CVE-2016-6702

The repository provides a technical analysis of CVE-2016-6702, detailing an integer overflow vulnerability in libjpeg's `jpeg_open_backing_store` function, which can lead to remote code execution during JPEG decompression. It includes code snippets and a PoC command but lacks functional exploit code.

Classification
Writeup 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Theoretical
Target: libjpeg (versions 4.4.4, 5.0.2, 5.1.1)
No auth needed
Prerequisites: crafted JPEG file · vulnerable libjpeg version
devstral-2 · analyzed Feb 27, 2026 Full analysis →

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/94160

Scores

CVSS v3 7.8
EPSS 0.0042
EPSS Percentile 62.7%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-284
Status published
Products (23)
google/android 4.0
google/android 4.0.1
google/android 4.0.2
google/android 4.0.3
google/android 4.0.4
google/android 4.1
google/android 4.1.2
google/android 4.2
google/android 4.2.1
google/android 4.2.2
... and 13 more
Published Nov 25, 2016
Tracked Since Feb 18, 2026