CVE-2016-0829 is a sensitive information disclosure vulnerability in the BnGraphicBufferProducer::onTransact function within the mediaserver component of Android versions 4.x, 5.x, and 6.x. It allows attackers to obtain sensitive information, such as Signature or SignatureOrSystem access, by triggering a QUEUE_BUFFER action due to an uninitialized output data structure. This vulnerability has a CVSS v3 score of 7.5 (High), indicating a network-exploitable flaw with low attack complexity, requiring no user interaction, and leading to high confidentiality impact. There is no integrity or availability impact. Currently, there is no evidence of active exploitation (KEV: No), nor are there public exploit modules available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, suggesting limited public attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
4.0CPE matchmatch criteria | cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:* | ||
4.0.1CPE matchmatch criteria | cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:* | ||
4.0.2CPE matchmatch criteria | cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:* | ||
4.0.3CPE matchmatch criteria | cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:* | ||
4.0.4CPE matchmatch criteria | cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.