libvpx in libwebm in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted mkv file, aka internal bug 23167726.
[
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4.0.1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4.0.2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4.0.3"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4.0.4"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4.1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4.1.1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4.1.2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4.2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4.2.1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4.2.2"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4.3"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "4.3.1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "5.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "5.0.1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "5.1"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "6.0"
}
]
},
{
"events": [
{
"introduced": "0"
},
{
"last_affected": "6.0.1"
}
]
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-2464.json"