5.5
CVSSv3

CVE-2016-3878

Published: 11/09/2016 Updated: 13/08/2017
CVSS v2 Base Score: 7.1 | Impact Score: 6.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 632
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C

Vulnerability Summary

decoder/ih264d_api.c in mediaserver in Android 6.x prior to 2016-09-01 mishandles the case of decoding zero MBs, which allows remote malicious users to cause a denial of service (device hang or reboot) via a crafted media file, aka internal bug 29493002.

Vulnerable Product Search on Vulmon Subscribe to Product

google android 6.0

google android 6.0.1