CVE-2016-1621

Published on: 03/12/2016 12:00:00 AM UTC

Last Modified on: 03/23/2021 11:27:04 PM UTC

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Certain versions of Android from Google contain the following vulnerability:

libvpx in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.0 before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, related to libwebm/mkvparser.cpp and other files, aka internal bug 23452792.

  • CVE-2016-1621 has been assigned by [email protected] to track the vulnerability - currently rated as - currently rated as CRITICAL severity.

CVSS3 Score: 9.8 - CRITICAL

Attack
Vector
Attack
Complexity
Privileges
Required
User
Interaction
NETWORK LOW NONE NONE
Scope Confidentiality
Impact
Integrity
Impact
Availability
Impact
UNCHANGED HIGH HIGH HIGH

CVSS2 Score: 10 - HIGH

Access
Vector
Access
Complexity
Authentication
NETWORK LOW NONE
Confidentiality
Impact
Integrity
Impact
Availability
Impact
COMPLETE COMPLETE COMPLETE

CVE References

Description Tags Link
Nexus Security Bulletin - March 2016 | Android Open Source Project Vendor Advisory
source.android.com
text/html
URL Logo CONFIRM source.android.com/security/bulletin/2016-03-01.html
5a6788730acfc6fd8f4a6ef89d2c376572a26b55 - platform/frameworks/av - Git at Google android.googlesource.com
text/html
URL Logo CONFIRM android.googlesource.com/platform/frameworks/av/+/5a6788730acfc6fd8f4a6ef89d2c376572a26b55
Google Android libvpx CVE-2016-1621 Memory Corruption Vulnerability cve.report (archive)
text/html
URL Logo BID 84239
[SECURITY] Fedora 23 Update: libvpx-1.4.0-6.fc23 lists.fedoraproject.org
text/html
URL Logo FEDORA FEDORA-2016-fae59061fe
Chromium: Multiple vulnerabilities (GLSA 201603-09) — Gentoo security security.gentoo.org
text/html
URL Logo GENTOO GLSA-201603-09
04839626ed859623901ebd3a5fd483982186b59d - platform/external/libvpx - Git at Google android.googlesource.com
text/html
URL Logo CONFIRM android.googlesource.com/platform/external/libvpx/+/04839626ed859623901ebd3a5fd483982186b59d
5a9753fca56f0eeb9f61e342b2fccffc364f9426 - platform/external/libvpx - Git at Google android.googlesource.com
text/html
URL Logo CONFIRM android.googlesource.com/platform/external/libvpx/+/5a9753fca56f0eeb9f61e342b2fccffc364f9426

Known Affected Configurations (CPE V2.3)

Type Vendor Product Version Update Edition Language
Operating
System
GoogleAndroid4.0AllAllAll
Operating
System
GoogleAndroid4.0.1AllAllAll
Operating
System
GoogleAndroid4.0.2AllAllAll
Operating
System
GoogleAndroid4.0.3AllAllAll
Operating
System
GoogleAndroid4.0.4AllAllAll
Operating
System
GoogleAndroid4.1AllAllAll
Operating
System
GoogleAndroid4.1.2AllAllAll
Operating
System
GoogleAndroid4.2AllAllAll
Operating
System
GoogleAndroid4.2.1AllAllAll
Operating
System
GoogleAndroid4.2.2AllAllAll
Operating
System
GoogleAndroid4.3AllAllAll
Operating
System
GoogleAndroid4.3.1AllAllAll
Operating
System
GoogleAndroid4.4AllAllAll
Operating
System
GoogleAndroid4.4.1AllAllAll
Operating
System
GoogleAndroid4.4.2AllAllAll
Operating
System
GoogleAndroid4.4.3AllAllAll
Operating
System
GoogleAndroid5.0AllAllAll
Operating
System
GoogleAndroid5.0.1AllAllAll
Operating
System
GoogleAndroid5.0.2AllAllAll
Operating
System
GoogleAndroid5.1AllAllAll
Operating
System
GoogleAndroid5.1.0AllAllAll
Operating
System
GoogleAndroid5.1.1AllAllAll
Operating
System
GoogleAndroid6.0AllAllAll
Operating
System
GoogleAndroid6.0.1AllAllAll
Operating
System
GoogleAndroid4.0AllAllAll
Operating
System
GoogleAndroid4.0.1AllAllAll
Operating
System
GoogleAndroid4.0.2AllAllAll
Operating
System
GoogleAndroid4.0.3AllAllAll
Operating
System
GoogleAndroid4.0.4AllAllAll
Operating
System
GoogleAndroid4.1AllAllAll
Operating
System
GoogleAndroid4.1.2AllAllAll
Operating
System
GoogleAndroid4.2AllAllAll
Operating
System
GoogleAndroid4.2.1AllAllAll
Operating
System
GoogleAndroid4.2.2AllAllAll
Operating
System
GoogleAndroid4.3AllAllAll
Operating
System
GoogleAndroid4.3.1AllAllAll
Operating
System
GoogleAndroid4.4AllAllAll
Operating
System
GoogleAndroid4.4.1AllAllAll
Operating
System
GoogleAndroid4.4.2AllAllAll
Operating
System
GoogleAndroid4.4.3AllAllAll
Operating
System
GoogleAndroid5.0AllAllAll
Operating
System
GoogleAndroid5.0.1AllAllAll
Operating
System
GoogleAndroid5.0.2AllAllAll
Operating
System
GoogleAndroid5.1AllAllAll
Operating
System
GoogleAndroid5.1.0AllAllAll
Operating
System
GoogleAndroid5.1.1AllAllAll
Operating
System
GoogleAndroid6.0AllAllAll
Operating
System
GoogleAndroid6.0.1AllAllAll
  • cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*:
  • cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*: