decoder/ih264d_process_intra_mb.c in mediaserver in Android 6.x before 2016-07-01 mishandles intra mode, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 28165659.
| Software | From | Fixed in |
|---|---|---|
| google / android | 6.0.1 | 6.0.1.x |
| google / android | 6.0 | 6.0.x |