CVE-2016-2463

Multiple integer overflows in the h264dec component in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and…

published June 13, 2016

CVSS
—
EPSS
1%
Percentile
58.1
In the wild
Unconfirmed
What it is

Multiple integer overflows in the h264dec component in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file that triggers a large memory allocation, aka internal bug 27855419.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00868 · 58.1th percentile
Published
2016-06-13T01:00Z
EPSS history
Timeline
  • 13 JUN 01:00Z
    Multiple integer overflows in the h264dec component in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and…
    cvelistv5