CVE-2016-3745

Multiple buffer overflows in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attackers to gain privileges via a crafted application that provides an AudioEffect reply, as demonstrated by obtaining Signature or SignatureOrSystem...

CVE-2016-3746

Use-after-free vulnerability in the mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem...

UBUNTU-CVE-2016-3754

mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not limit process-memory usage, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 28615448...

Android Mediaserver elevation of privilege vulnerability (CNVD-2016-04638)

Android is a Linux-based open source operating system, and Mediaserver is one of its multimedia service components. A security vulnerability in Mediaserver on Android allows remote attackers to exploit the vulnerability to build special files that can be parsed by the user, which can be used to...

Android Mediaserver Remote Code Execution Vulnerability (CNVD-2016-04628)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A remote code execution vulnerability exists in Mediaserver in Android. A remote attacker could exploit this vulnerability with the...

Android Mediaserver elevation of privilege vulnerability (CNVD-2016-04639)

Android is a Linux-based open source operating system, and Mediaserver is one of its multimedia service components. A security vulnerability in Mediaserver on Android allows remote attackers to exploit the vulnerability to build special files that can be parsed by the user, which can be used to...

Android Mediaserver Remote Code Execution Vulnerability (CNVD-2016-04626)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A remote code execution vulnerability exists in Mediaserver in Android. A remote attacker could use this vulnerability to cause memo...

Android Mediaserver Remote Code Execution Vulnerability (CNVD-2016-04635)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A remote code execution vulnerability exists in Mediaserver in Android. A remote attacker could exploit this vulnerability with the...

Android Mediaserver Information Disclosure Vulnerability (CNVD-2016-04633)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. An information disclosure vulnerability exists in Andrion's Mediaserver. A local attacker could exploit this vulnerability with a...

Android Mediaserver Remote Code Execution Vulnerability (CNVD-2016-04627)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A remote code execution vulnerability exists in Mediaserver in Android. A remote attacker could exploit this vulnerability with...

Android Mediaserver Remote Code Execution Vulnerability (CNVD-2016-04613)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A remote code execution vulnerability exists in Mediaserver in Android. A remote attacker could exploit this vulnerability with the...

CVE-2016-2478

mm-video-v4l2/vidc/vdec/src/omxvdecmsm8974.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles pointers, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or...

UBUNTU-CVE-2016-2483

The mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSyste...

Android Mediaserver Privilege Mobilization Vulnerability (CNVD-2016-03924)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. An elevation vulnerability exists in Android's Mediaserver, which can be exploited by a local attacker to execute arbitrary code wit...

Android Mediaserver Privilege Mobilization Vulnerability (CNVD-2016-03925)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. An elevation vulnerability exists in Android's Mediaserver, which can be exploited by a local attacker to execute arbitrary code wit...

Android Mediaserver elevation of privilege vulnerability (CNVD-2016-03966)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA in the U.S. Mediaserver is one of the multimedia service components. An elevation vulnerability exists in Android's Mediaserver, which can be exploited by a local attacker to execut...

Android Mediaserver Privilege Mobilization Vulnerability (CNVD-2016-03926)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. An elevation vulnerability exists in Android's Mediaserver, which can be exploited by a local attacker to execute arbitrary code wit...

Android Mediaserver Remote Code Execution Vulnerability (CNVD-2016-03851)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A remote code execution vulnerability exists in Android's Mediaserver. An attacker could exploit this vulnerability with a specially...

Android Mediaserver elevation of privilege vulnerability (CNVD-2016-03857)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA in the U.S. Mediaserver is one of the multimedia service components. An elevation of privilege vulnerability exists in Android's Mediaserver. A local attacker can exploit this...

CVE-2016-2451

codecs/on2/dec/SoftVPX.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not validate VPX output buffer sizes, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining...