vulnwire
9.8crit

CVE-2016-24171 exploit

media/libmedia/IOMX.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does…

Published 10 y ago · modified 4 mo ago · JSON

CVSS
9.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
5.1%
percentile 92%
Public exploits
1
Exploit-DB

media/libmedia/IOMX.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not initialize a parameter data structure, which allows attackers to obtain sensitive information from process memory, and consequently bypass an unspecified protection mechanism, via unspecified vectors, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26914474.

Exploit prediction (EPSS)

5.07% probability of exploitation in the next 30 days, higher than 92% of all scored CVEs.

Exploits and detections

  • EDB-39685 Google Android - IOMX 'getConfig'/'getParameter' Information Disclosure · dos · 2016-04-11

CVSS scores

Assigned byVersionScoreVector
NVD3.09.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD2.010.0AV:N/AC:L/Au:N/C:C/I:C/A:C

Classification

Weakness
  • CWE-264 Permissions, Privileges, and Access Controls

References

  • exploit-db.com /exploits/39685/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
  • source.android.com /security/bulletin/2016-04-02.html · x_refsource_CONFIRM, x_transferred
  • android.googlesource.com /platform/frameworks/av/+/1171e7c047bf79e7c93342bb6a812c9edd86aa84 · x_refsource_CONFIRM, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.