CVE-2016-3745

CVE-2016-3745 describes multiple buffer overflow vulnerabilities in the Android mediaserver component, affecting Android versions 4.x through 6.x. An unauthenticated attacker can exploit these flaws remotely by providing a crafted AudioEffect reply, leading to privilege escalation and potentially gaining Signature or SignatureOrSystem access. With a CVSS score of 9.8 (Critical), this vulnerability poses a significant risk due to its network-based attack vector and complete compromise of confidentiality, integrity, and availability. While no public exploit code or active exploitation has been observed, and community discussion is minimal, the high severity warrants attention.