CVE catalog

CVE-2016-0826

UBUNTU-CVE-2016-0826

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.57% · Oct 27, 2026

libcameraservice in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 does not require use of the ICameraService::dump method for a camera service dump, which allows attackers to gain privileges via a crafted application that directly dumps, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26265403.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntuandroid16.0420150818-1500-0ubuntu2vulnerable
Ubuntuandroid16.0420150818-1500-0ubuntu3vulnerable
Ubuntuandroid16.0420160307-0742-0ubuntu3fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntuandroiddeb16.0420160307-0742-0ubuntu3Not reportedUBUNTU-CVE-2016-0826Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References