NVD

Id
18634  
Name
CVE-2016-2419  
Description
media/libmedia/IDrm.cpp in mediaserver in Android 6.x before 2016-04-01 does not initialize a certain key-request data structure, which allows attackers to obtain sensitive information from process memory, and consequently bypass an unspecified protection mechanism, via unspecified vectors, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26323455.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-04-17  
Modified Date
2016-04-25  
Seq
2016-2419  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
103257 18634 CVE-2016-2419 http://source.android.com/security/bulletin/2016-04-02.html  View
103258 18634 CVE-2016-2419 https://android.googlesource.com/platform/frameworks/av/+/5a856f2092f7086aa0fea9ae06b9255befcdcd34  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1542 JVNDB-2016-002315 Android のメディアサーバの media/libmedia/IDrm.cpp におけるプロセスメモリから重要な情報を取得される脆弱性 Android のメディアサーバの media/libmedia/IDrm.cpp は、特定のキーリクエストのデータ構造を初期化しないため、プロセスメモリから重要な情報を取得され、その結果、不特定の保護メカニズムを回避される脆弱性が存在します。 CVE-2016-2419 88925 CVE-2016-2419 18634 10 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002315.html 2016-04-04 2016-04-28 View