CVE-2016-2463
Status: ModifiedHigh (8.4)—
Severity8.4High · CVSS 3.0
Exploitation probability0.87 %higher than 58% of CVEs
Active exploitationNonot in the CISA catalog
Public exploitNot knownno public code found
Multiple integer overflows in the h264dec component in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file that triggers a large memory allocation, aka internal bug 27855419.
CVSS
- Base score
- 8.4
- Version
- 3.0
- Vector
- CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days
- 0.87 %
- Percentile among all scored CVEs
- 58
- Score date
- 10/24/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- CWE-119, CWE-189
References
Show 4 references
- http://source.android.com/security/bulletin/2016-06-01.html
- https://android.googlesource.com/platform/frameworks/av/+/2b6f22dc64d456471a1dc6df09d515771d1427c8
- http://source.android.com/security/bulletin/2016-06-01.html
- https://android.googlesource.com/platform/frameworks/av/+/2b6f22dc64d456471a1dc6df09d515771d1427c8
Raw JSON (NVD)
Show
{
"id": "CVE-2016-2463",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 8.4,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 2.5
}
]
},
"affected": [
{
"source": "security@android.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2016-06-13T01:59:02.340",
"references": [
{
"url": "http://source.android.com/security/bulletin/2016-06-01.html",
"tags": [
"Vendor Advisory"
],
"source": "security@android.com"
},
{
"url": "https://android.googlesource.com/platform/frameworks/av/+/2b6f22dc64d456471a1dc6df09d515771d1427c8",
"source": "security@android.com"
},
{
"url": "http://source.android.com/security/bulletin/2016-06-01.html",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://android.googlesource.com/platform/frameworks/av/+/2b6f22dc64d456471a1dc6df09d515771d1427c8",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-119"
},
{
"lang": "en",
"value": "CWE-189"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Multiple integer overflows in the h264dec component in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file that triggers a large memory allocation, aka internal bug 27855419."
},
{
"lang": "es",
"value": "Múltiples desbordamientos de entero en el componente h264dec en libstagefright en mediaserver en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 2016-06-01 permiten a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria) a través de un archivo multimedia manipulado que desencadena una gran asignación de memoria, también conocido como error interno 27855419."
}
],
"lastModified": "2026-06-17T00:44:06.620",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
},
{
"criteria": "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BB318EA4-2908-4B91-8DBB-20008FDF528A"
},
{
"criteria": "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F4E46A9-B652-47CE-92E8-01021E57724B"
},
{
"criteria": "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
},
{
"criteria": "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
},
{
"criteria": "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1DA9F0F7-D592-481E-884C-B1A94E702825"
},
{
"criteria": "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
},
{
"criteria": "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
},
{
"criteria": "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
},
{
"criteria": "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "49413FF7-7910-4F74-B106-C3170612CB2A"
},
{
"criteria": "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
},
{
"criteria": "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
},
{
"criteria": "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "98C32982-095C-4628-9958-118A3D3A9CAA"
},
{
"criteria": "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
},
{
"criteria": "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
},
{
"criteria": "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
},
{
"criteria": "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7C4E6353-B77A-464F-B7DE-932704003B33"
},
{
"criteria": "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "77125688-2CCA-4990-ABB2-551D47CB0CDD"
},
{
"criteria": "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
},
{
"criteria": "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
},
{
"criteria": "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
},
{
"criteria": "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "691FA41B-C2CE-413F-ABB1-0B22CB322807"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "security@android.com"
}