CVE-2016-3829

CVE-2016-3829 is a denial-of-service vulnerability affecting the mediaserver component in Android 6.x devices prior to the August 1, 2016 security update. A remote attacker can trigger a device hang or reboot by providing a specially crafted media file due to uninitialized structure members in the ih264d decoder. Rated Medium severity with a CVSS score of 5.5, this vulnerability requires user interaction (UI:R) and local access (AV:L) to exploit, leading to high availability impact (A:H). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in the CISA KEV catalog, though it has received some community discussion and media coverage.