Beveiligingsadvies

CVE-2016-0811

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2016-02-07 01:00:00
Laatst bijgewerkt 2024-08-05 22:30:05
Toegewezen door google_android
CVSS-score geen score
Status PUBLISHED

Beschrijving

Integer overflow in the BnCrypto::onTransact function in media/libmedia/ICrypto.cpp in libmediaplayerservice in Android 6.x before 2016-02-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, by triggering an improper size calculation, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 25800375.