Published: 10/10/2016 Updated: 28/11/2016

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8

VMScore: 828

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

The SoftMPEG4 component in libstagefright in mediaserver in Android 4.x prior to 4.4.4, 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, 6.x prior to 2016-10-01, and 7.0 prior to 2016-10-01 allows malicious users to gain privileges via a crafted application, aka internal bug 30033990.

Vulnerable Product	Search on Vulmon	Subscribe to Product
google android 5.0.1
google android 5.1
google android 4.1
google android 4.1.2
google android 4.4.1
google android 4.4.2
google android 4.4.3
google android 7.0
google android 6.0.1
google android 4.0.1
google android 4.0.2
google android 4.2.2
google android 4.3
google android 6.0
google android 5.0
google android 4.0.3
google android 4.0.4
google android 4.3.1
google android 4.4
google android 5.1.0
google android 4.0
google android 4.2
google android 4.2.1

CWE-264 https://android.googlesource.com/platform/frameworks/av/+/c48ef757cc50906e8726a3bebc3b60716292cdba https://android.googlesource.com/platform/frameworks/av/+/d4271b792bdad85a80e2b83ab34c4b30b74f53ec http://source.android.com/security/bulletin/2016-10-01.html http://www.securityfocus.com/bid/93296 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2016-3909

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect