Vulners
Lucene search
Android 7 < 9 - Remote Code Execution
| Reporter | Title | Published | Views | Family All 19 |
|---|---|---|---|---|
 | Android 7 - 9 VideoPlayer - (ihevcd_parse_pps) Out-of-Bounds Write Exploit | 15 Jul 201900:00 | – | zdt |
 | Exploit for Deserialization of Untrusted Data in Redhat Jboss_Enterprise_Application_Platform | 8 Dec 202020:38 | – | gitee |
 | Exploit for Out-of-bounds Write in Google Android | 27 Jul 201919:03 | – | githubexploit |
 | Android Security Bulletin—July 2019Stay organized with collectionsSave and categorize content based on your preferences. | 1 Jul 201900:00 | – | androidsecurity |
 | CVE-2019-2107 | 1 Jul 201900:00 | – | android |
 | CVE-2019-2107 | 8 Jul 201921:00 | – | circl |
 | Google Android Media framework remote code execution vulnerability (CNVD-2019-23104) | 3 Jul 201900:00 | – | cnvd |
 | Android Out Of Bounds Write Remote Code Execution (CVE-2019-2107) | 24 Jul 201900:00 | – | checkpoint_advisories |
 | CVE-2019-2107 | 8 Jul 201917:36 | – | cve |
 | CVE-2019-2107 | 8 Jul 201917:36 | – | cvelist |
10
# Exploit Title: Android 7-9 - Remote Code Execution
# Date: [date]
# Exploit Author: Marcin Kozlowski
# Version: 7-9
# Tested on: Android
# CVE : 2019-2107
CVE-2019-2107 - looks scary. Still remember Stagefright and PNG bugs vulns ....
With CVE-2019-2107 the decoder/codec runs under mediacodec user and with properly "crafted" video (with tiles enabled - ps_pps->i1_tiles_enabled_flag) you can possibly do RCE. The codec affected is HVEC (a.k.a H.265 and MPEG-H Part 2)
POC:
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/47157.zipData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
24 Jul 2019 00:00Current
8.9High risk
Vulners AI Score8.9
CVSS 38.8
CVSS 29.3
EPSS0.43885