decoder/ih264d_api.c in mediaserver in Android 6.x prior to 2016-07-01 does not initialize certain data structures, which allows remote malicious users to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 27907656.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
google android 6.0.1 |
||
google android 6.0 |