CVE-2016-3895

Integer overflow in the Region::unflatten function in libs/ui/Region.cpp in mediaserver in Android 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows attackers to obtain sensitive information via a crafted application, aka internal bug 29983260...

CVE-2016-3895

CVE-2016-3895 is an information-disclosure vulnerability in Android Mediaserver. The issue arises from an integer overflow in Region::unflatten (libs/ui/Region.cpp) which could allow a crafted file to cause memory corruption and expose sensitive data. Affected products are Android 6.x and 7.0 pri...