Memory corruption

In serviceDied of HalDeathHandlerHidl.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege in the audio server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2019-2007

In getReadIndex and getWriteIndex of FifoControllerBase.cpp, there is a possible out-of-bounds write due to an integer overflow. This could lead to local escalation of privilege in the audio server with no additional execution privileges needed. User interaction is not needed for...

CVE-2019-2007

CVE-2019-2007 affects Android Audio stack via FifoControllerBase.cpp, where getReadIndex/getWriteIndex allow an out-of-bounds write caused by an integer overflow. This leads to local elevation of privilege in the audio server with no extra user interaction. Affected Android versions include 8.1 a...

CVE-2019-2006

In serviceDied of HalDeathHandlerHidl.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege in the audio server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2019-2006: Concurrent Execution using Shared Resource with Improper Synchronization

In serviceDied of HalDeathHandlerHidl.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege in the audio server with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2019-2096

In EffectRelease of EffectBundle.cpp, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege in the audio server with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:...

CVE-2019-2096

In EffectRelease of EffectBundle.cpp, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege in the audio server with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:...

CVE-2019-2096

CVE-2019-2096 affects Google Android components, specifically linked to a memory corruption vulnerability in EffectBundle.cpp caused by a double free. This could enable local escalation of privilege in the Android audio server with no extra execution privileges and no user interaction required. A...

Google Android Media framework elevation of privilege vulnerability (CNVD-2019-23118)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Media framework component in Google Android 7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9. An attacker can exploit this vulnerability to...

Google Android Media framework elevation of privilege vulnerability (CNVD-2019-23554)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Media framework component of Google Android 9. An attacker can exploit this vulnerability to cause a local escalation of...

CVE-2017-0738

A information disclosure vulnerability in the Android media framework audioserver. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37563371...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the Android operating system’s audio server is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Google Android Audioserver Information Disclosure Vulnerability (CNVD-2017-00209)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. There are information disclosure vulnerabilities in Google Android. Attackers can exploit these vulnerabilities to obtain potentially sensitive information, and the information...

Test if Audio Server installed and list access rights of /dev/audio

Test if Audio Server installed and list access rights of /dev/audio. This Script tests if the following Audio-Servers installed: esound, paudio, pulseaudio, artsd, phonon. OpenVAS Vulnerability Test $Id: GSHBSSHaudio.nasl 7061 2017-09-05 11:50:40Z teissa $ Test if Audio Server installed and list...

Test if Audio Server installed and list access rights of /dev/audio

Test if Audio Server is installed and list access rights of /dev/audio. This Script tests if the following Audio-Servers are installed: esound, paudio, pulseaudio, artsd, phonon. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Authentication flaw

MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote attackers to discover usernames, passwords, and unspecified other data from the user database via a modified authentication sequence to the Audio Server, aka Bug ID CSCsv76935...

CVE-2010-0141: Undefined Security Weakness

MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote attackers to discover usernames, passwords, and unspecified other data from the user database via a modified authentication sequence to the Audio Server, aka Bug ID CSCsv76935...

SHOUTcast DNAS/win32 1.9.4 File Request Format String Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'SHOUTcast...

MDVA-2008:200 : jackit

This update provides the latest version of the JACK audio server. It is not provided to fix any specific bugs, but due to the recommendation of the JACK development community that all users should upgrade to 0.116.0 or later, as announced at http://jackaudio.org/. The release fixes many bugs and...

Mandriva Update for jackit MDVA-2008:200 (jackit)

Check for the Version of jackit OpenVAS Vulnerability Test Mandriva Update for jackit MDVA-2008:200 jackit Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...