NVD

Id
18632  
Name
CVE-2016-2417  
Description
media/libmedia/IOMX.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not initialize a parameter data structure, which allows attackers to obtain sensitive information from process memory, and consequently bypass an unspecified protection mechanism, via unspecified vectors, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26914474.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-04-17  
Modified Date
2016-04-25  
Seq
2016-2417  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
103253 18632 CVE-2016-2417 http://source.android.com/security/bulletin/2016-04-02.html  View
103254 18632 CVE-2016-2417 https://android.googlesource.com/platform/frameworks/av/+/1171e7c047bf79e7c93342bb6a812c9edd86aa84  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1541 JVNDB-2016-002314 Android のメディアサーバの media/libmedia/IOMX.cpp におけるプロセスメモリから重要な情報を取得される脆弱性 Android のメディアサーバの media/libmedia/IOMX.cpp は、パラメータのデータ構造を初期化しないため、プロセスメモリから重要な情報を取得され、その結果、不特定の保護メカニズムを回避される脆弱性が存在します。 CVE-2016-2417 88923 CVE-2016-2417 18632 10 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002314.html 2016-04-04 2016-04-28 View