CVE-2016-2499

—

CVSS 3.0

5.5 medium

EPSS

<1%p29

Published

Jun 13, 2016 (Jun 13, 2016)

Modified

Jun 17, 2026

Description

AudioSource.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not initialize certain data, which allows attackers to obtain sensitive information via a crafted application, aka internal bug 27855172.

Vendors: google
Products: android
Weakness: CWE-200
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.