Vulnerabilities (CVE)

Filtered by CWE-172
Total 23 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-3829 1 Google 1 Android 2026-06-17 7.1 HIGH 5.5 MEDIUM
The ih264d decoder in mediaserver in Android 6.x before 2016-08-01 does not initialize certain structure members, which allows remote attackers to cause a denial of service (device hang or reboot) via a crafted media file, aka internal bug 29023649.
CVE-2016-3828 1 Google 1 Android 2026-06-17 7.1 HIGH 5.5 MEDIUM
decoder/ih264d_api.c in mediaserver in Android 6.x before 2016-08-01 mishandles invalid PPS and SPS NAL units, which allows remote attackers to cause a denial of service (device hang or reboot) via a crafted media file, aka internal bug 28835995.
CVE-2016-3827 1 Google 1 Android 2026-06-17 7.1 HIGH 5.5 MEDIUM
codecs/hevcdec/SoftHEVC.cpp in libstagefright in mediaserver in Android 6.0.1 before 2016-08-01 mishandles decoder errors, which allows remote attackers to cause a denial of service (device hang or reboot) via a crafted media file, aka internal bug 28816956.