CVE catalog

CVE-2016-0811

UBUNTU-CVE-2016-0811

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.68% · Oct 25, 2026

Integer overflow in the BnCrypto::onTransact function in media/libmedia/ICrypto.cpp in libmediaplayerservice in Android 6.x before 2016-02-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, by triggering an improper size calculation, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 25800375.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntuandroid16.0420150818-1500-0ubuntu2vulnerable
Ubuntuandroid16.0420150818-1500-0ubuntu3vulnerable
Ubuntuandroid16.0420160307-0742-0ubuntu3vulnerable
Ubuntuandroid16.0420160330-0939-0ubuntu1vulnerable

Fixed-version evidence

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References