CVE catalog

CVE-2016-0824

UBUNTU-CVE-2016-0824

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.65% · Oct 25, 2026

libmpeg2 in libstagefright in Android 6.x before 2016-03-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via crafted Bitstream data, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 25765591.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntuandroid16.0420150818-1500-0ubuntu2vulnerable
Ubuntuandroid16.0420150818-1500-0ubuntu3vulnerable
Ubuntuandroid16.0420160307-0742-0ubuntu3fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntuandroiddeb16.0420160307-0742-0ubuntu3Not reportedUBUNTU-CVE-2016-0824Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References