Exploit for Out-of-bounds Write in Google Android

🗓️ 27 Jul 2019 19:03:27Reported by infiniteLoopersType

A critical Out-of-bounds Write vulnerability (CVE-2019-2107) has been discovered in Google Android's HVEC decoder, potentially allowing Remote Code Execution (RCE) when a specially crafted video is played. The vulnerability is caused by invalid tile widths and PPS ID out of range, affecting media players and decoders on Android devices

Reporter	Title	Published	Views	Family All 20
0day.today	Android 7 - 9 VideoPlayer - (ihevcd_parse_pps) Out-of-Bounds Write Exploit	15 Jul 201900:00	–	zdt
Gitee	Exploit for Deserialization of Untrusted Data in Redhat Jboss_Enterprise_Application_Platform	8 Dec 202020:38	–	gitee
Android Security Bulletins	Android Security Bulletin—July 2019Stay organized with collectionsSave and categorize content based on your preferences.	1 Jul 201900:00	–	androidsecurity
android	CVE-2019-2107	1 Jul 201900:00	–	android
Circl	CVE-2019-2107	8 Jul 201921:00	–	circl
CNVD	Google Android Media framework remote code execution vulnerability (CNVD-2019-23104)	3 Jul 201900:00	–	cnvd
Check Point Advisories	Android Out Of Bounds Write Remote Code Execution (CVE-2019-2107)	24 Jul 201900:00	–	checkpoint_advisories
CVE	CVE-2019-2107	8 Jul 201917:36	–	cve
Cvelist	CVE-2019-2107	8 Jul 201917:36	–	cvelist
Exploit DB	Android 7 - 9 VideoPlayer - 'ihevcd_parse_pps' Out-of-Bounds Write	15 Jul 201900:00	–	exploitdb