Vulnerabilities > CVE-2016-3754 - Resource Management Errors vulnerability in Google Android

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

google

CWE-399

NVD

Published: 2016-07-11

Updated: 2016-07-11

Summary

mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not limit process-memory usage, which allows remote attackers to cause a denial of service (device hang or reboot) via a crafted media file, aka internal bug 28615448.

Vulnerable Configurations

Part	Description	Count
OS	Google Google Android 5.1.0 Google Android 4.2 Google Android 4.1 Google Android 6.0.1 Google Android 6.0 Google Android 4.0.2 Google Android 4.4.3 Google Android 4.0.4 Google Android 4.3 Google Android 4.0.1 Google Android 4.2.1 Google Android 5.0.1 Google Android 5.0 Google Android 4.0.3 Google Android 4.0 Google Android 4.4 Google Android 4.4.1 Google Android 4.2.2 Google Android 4.3.1 Google Android 4.4.2 Google Android 5.1 Google Android 4.1.2	22

Common Weakness Enumeration (CWE)

CWE-399 - Resource Management Errors

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References