CVE-2016-0839

Publication date

2016-04-18 00:00:00

Family

google_android

State

PUBLISHED

Description

post_proc/volume_listener.c in mediaserver in Android 6.x before 2016-04-01 mishandles deleted effect context, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 25753245.