The 2016 Pwnie Nominee For Most Over-Hyped Bug

Stagefright (CVE-2015-1538)

Credit: jduck

MMS vector was hyped to the ends of the earth and back, yet completely ignored the existence of ASLR, and good luck info leaking. It is effectively unexploitable on any device after 2012. Logo, articles, interviews, and they literally bought ad space on news sites. One year later it is still being talked about.

Stagefright 

(CVE-2015-1538)