CVE-2016-6767 — INC Android vulnerability

CWE-3995 documents4 sources
Severity
5.5MEDIUMNVD
EPSS
0.1%
top 65.19%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
WavpackGoogle INC AndroidGoogle Android
Timeline
PublishedJan 12
Latest updateMay 17

Description

A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4. Android ID: A-31833604.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

▶NVDgoogle/android17 versions+16
▶CVEListV5google_inc/androidAndroid-4.4.4
▶Ubuntuwavpack/wavpack< 4.70.0-1ubuntu0.1+1

🔴Vulnerability Details

3
GHSA
GHSA-92vx-5hcq-2xpf: A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot↗2022-05-17
▶
OSV
wavpack vulnerabilities↗2018-02-12
▶
OSV
CVE-2016-6767: A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot↗2017-01-12
▶

📋Vendor Advisories

1
Android
CVE-2016-6767: Android Security Bulletin 2016-12-01 CVE: CVE-2016-6767 Severity: HIGH Affected AOSP versions: 4↗2016-12-01
▶