CVE-2016-0811 | BDVDB-2026-74282 Detail

Description#

Integer overflow in the BnCrypto::onTransact function in media/libmedia/ICrypto.cpp in libmediaplayerservice in Android 6.x before 2016-02-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, by triggering an improper size calculation, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 25800375.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://android.googlesource.com/platform%2Fframeworks%2Fav/+/22f824feac43d5758f9a70b77f2aca840ba62c3b
http://source.android.com/security/bulletin/2016-02-01.html

Exploit#

No public exploit known

History#

Version 12016-02-07Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.