vulnerability

Google Android Vulnerability: CVE-2016-0810

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:M/Au:N/C:C/I:C/A:C)

Published

Feb 6, 2016

Added

Apr 18, 2016

Modified

Oct 30, 2017

Description

media/libmedia/SoundPool.cpp in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 mishandles locking requirements, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 25781119.

Solution

google-android-upgrade-latest

References

CVE-2016-0810
https://attackerkb.com/topics/CVE-2016-0810
http://source.android.com/security/bulletin/2016-02-01.html

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report