CVE-2016-3870

omx/SimpleSoftOMXComponent.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 does not prevent input-port changes, which allows attackers to gain privileges via a crafted application, aka...

CVE-2016-3870

CVE-2016-3870 concerns an elevation of privilege in Android Mediaserver. The flaw lies in omx/SimpleSoftOMXComponent.cpp within libstagefright, where input-port changes are not properly prevented. A crafted application could exploit this to gain privileges. Affected Android platforms include 4.x ...

CVE-2016-3870

omx/SimpleSoftOMXComponent.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 does not prevent input-port changes, which allows attackers to gain privileges via a crafted application, aka...