CVE-2016-3765

CVE-2016-3765 describes an out-of-bounds read vulnerability in the mediaserver component of Android 6.x, specifically within the decoder/impeg2d_bitstream.c file. This flaw allows a crafted application to potentially extract sensitive information from process memory or trigger a denial of service. The vulnerability is rated as High severity (CVSS 7.7), indicating a local attack vector with low complexity, requiring no user interaction, and leading to high impact on confidentiality and availability. While the vulnerability was patched before July 2016, there is no evidence of active exploitation, publicly available exploit code in Metasploit or ExploitDB, or significant community discussion or media coverage.