CVE-2016-2413

CVE-2016-2413 is a privilege escalation vulnerability affecting Android versions 5.0.x, 5.1.x, and 6.x, where an uninitialized handle pointer in the mediaserver component allows a crafted application to gain elevated privileges, such as Signature or SignatureOrSystem access. With a CVSS v3 score of 7.8 (High), this vulnerability can be exploited locally with low attack complexity, requiring user interaction to install a malicious application, and can lead to high impact on confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, publicly available exploit code in common frameworks like Metasploit or ExploitDB, nor significant community discussion or media coverage.