VYPR
← All advisories
High severity7.5NVD Advisory· Published Mar 12, 2016· Updated Jun 17, 2026

CVE-2016-0828

CVE-2016-0828

Description

The BnGraphicBufferConsumer::onTransact function in libs/gui/IGraphicBufferConsumer.cpp in mediaserver in Android 5.x before 5.1.1 LMY49H and 6.x before 2016-03-01 does not initialize a certain slot variable, which allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, by triggering an ATTACH_BUFFER action, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26338113.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • Google/Android9 versions
    cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*+ 8 more
    • cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*
    • cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*
    • cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*
    • cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*
    • cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*
    • cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*
    • cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*
    • (no CPE)range: 5.x < 5.1.1 LMY49H, 6.x < 2016-03-01

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.