CVE-2016-2487

CVE-2016-2487 is a privilege escalation vulnerability in the libstagefright component of Android's mediaserver, affecting versions 4.x through 6.x prior to their respective patches. An attacker could exploit this by tricking a user into installing a crafted application, gaining significant privileges such as Signature or SignatureOrSystem access. With a CVSS v3 score of 7.8 (High), this vulnerability is serious, allowing for high confidentiality, integrity, and availability impacts with low attack complexity. While no public exploit code or active exploitation is indicated by available intelligence, the vulnerability did receive some community discussion and media coverage at the time of its disclosure.