CVE-2016-3881 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Google Android

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer6 documents6 sources

Severity

5.5MEDIUMNVD

EPSS

0.3%

top 49.90%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Webmproject Libvpx Google Android

Timeline

PublishedSep 11

Latest updateMay 17

Description

The decoder_peek_si_internal function in vp9/vp9_dx_iface.c in libvpx in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 allows remote attackers to cause a denial of service (buffer over-read, and device hang or reboot) via a crafted media file, aka internal bug 30013856.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶Debianwebmproject/libvpx< 1.6.1-1+3

▶NVDgoogle/android23 versions+22

Patches

Patch: android.googlesource.com ↗Patch: android.googlesource.com ↗

🔴Vulnerability Details

GHSA

GHSA-966f-h4pf-gr7m: The decoder_peek_si_internal function in vp9/vp9_dx_iface↗2022-05-17

▶

CVEList

CVE-2016-3881: The decoder_peek_si_internal function in vp9/vp9_dx_iface↗2016-09-11

▶

OSV

CVE-2016-3881: The decoder_peek_si_internal function in vp9/vp9_dx_iface↗2016-09-11

▶

📋Vendor Advisories

Android

CVE-2016-3881: Android Security Bulletin 2016-09-01 CVE: CVE-2016-3881 Severity: HIGH Affected AOSP versions: 4↗2016-09-01

▶

Debian

CVE-2016-3881: libvpx - The decoder_peek_si_internal function in vp9/vp9_dx_iface.c in libvpx in mediase...↗2016

▶