CVE-2016-6702

A remote code execution vulnerability in libjpeg in Android 4.x before 4.4.4, 5.0.x before 5.0.2, and 5.1.x before 5.1.1 could enable an attacker using a…

published November 25, 2016

CVSS
—
EPSS
1%
Percentile
63.9
In the wild
Unconfirmed
What it is

A remote code execution vulnerability in libjpeg in Android 4.x before 4.4.4, 5.0.x before 5.0.2, and 5.1.x before 5.1.1 could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses libjpeg. Android ID: A-30259087.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01054 · 63.9th percentile
Published
2016-11-25T16:00Z
EPSS history
Timeline
  • 25 NOV 16:00Z
    A remote code execution vulnerability in libjpeg in Android 4.x before 4.4.4, 5.0.x before 5.0.2, and 5.1.x before 5.1.1 could enable an attacker using a…
    cvelistv5