CVE-2016-10393

9.8 criticalEPSS 0.8%

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when processing a clip with large size values, integer arithmetic overflows, and allocated buffer size will be less than intended buffer size. The following buffer operations will overflow the allocated buffer.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWEs: CWE-119, CWE-190
Published: 2018-03-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

google:android

References

http://www.securityfocus.com/bid/103292
https://source.android.com/security/bulletin/2018-03-01
http://www.securityfocus.com/bid/103292
https://source.android.com/security/bulletin/2018-03-01

Check your stack JSON