CVE-2016-0829 Information disclosure in n/a

High 7.5 Published 12 Mar 2016 Updated 5 Aug 2024

Attackers can leak sensitive data and bypass security protections in Android mediaserver by triggering a specific buffer action.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2016-0829?

CVE-2016-0829 is a high-severity vulnerability in Google Android, published on 12 Mar 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The BnGraphicBufferProducer::onTransact function in libs/gui/IGraphicBufferConsumer.cpp in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 does not initialize a certain output data structure, which allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, by triggering a QUEUE_BUFFER action, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26338109.

Weakness: CWE-254, CWE-200

Which versions are affected by CVE-2016-0829?

It affects 1 product.

Products include Google Android.

How do I fix CVE-2016-0829?

Apply the vendor's patch.

Is CVE-2016-0829 being exploited?

There is no known exploitation of CVE-2016-0829 in the wild and no public exploit code.

All Google Android vulnerabilities

Sources

Also known as GHSA-2498-8v9g-2q83, UBUNTU-CVE-2016-0829.