Vulnerabilities > CVE-2016-3821 - NULL Pointer Dereference vulnerability in Google Android

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

google

CWE-476

critical

NVD

Published: 2016-08-05

Updated: 2024-11-21

Summary

libmedia in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 has certain incorrect declarations, which allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference or memory corruption) via a crafted media file, aka internal bug 28166152.

Vulnerable Configurations

Part	Description	Count
OS	Google Google Android 5.1.0 Google Android 4.2 Google Android 4.1 Google Android 6.0.1 Google Android 6.0 Google Android 4.0.2 Google Android 4.4.3 Google Android 4.0.4 Google Android 4.3 Google Android 4.0.1 Google Android 4.2.1 Google Android 5.0.1 Google Android 5.0 Google Android 4.0.3 Google Android 4.0 Google Android 4.4 Google Android 4.4.1 Google Android 4.2.2 Google Android 4.3.1 Google Android 4.4.2 Google Android 5.1 Google Android 4.1.2	22

Common Weakness Enumeration (CWE)

CWE-476 - NULL Pointer Dereference

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References