CVE-2016-3871

CVE-2016-3871 describes multiple buffer overflow vulnerabilities in the libstagefright component of Android's mediaserver, specifically within the MP3 decoding functionality. This flaw affects various Android versions, including 4.x, 5.0.x, 5.1.x, 6.x, and 7.0, prior to their respective September 2016 security updates. An attacker could exploit this by tricking a user into installing a crafted application, leading to privilege escalation. The vulnerability carries a high CVSSv3 score of 7.8, indicating a significant risk. Its attack vector is local, requiring user interaction (UI:R) to install a malicious application, but the attack complexity is low (AC:L). Successful exploitation could result in high impacts to confidentiality, integrity, and availability (C:H/I:H/A:H), allowing an attacker to gain elevated privileges on the affected device. Despite its severity, there is no evidence of active exploitation in the wild, and it is not listed in CISA's KEV catalog. No public exploit code, such as Metasploit or ExploitDB modules, is available, and there is minimal community discussion or media coverage surrounding this CVE.