CVE-2016-6761: Improper Access Control

An elevation of privilege vulnerability in Qualcomm media codecs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not...

CVE-2016-6760: Improper Access Control

An elevation of privilege vulnerability in Qualcomm media codecs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not...

CVE-2016-6758: Improper Access Control

An elevation of privilege vulnerability in Qualcomm media codecs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not...

PT-2017-1044

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10, Kernel-3.18 Description The issue is related to an elevation of privilege vulnerability in Qualcomm media codecs, which could allow a local malicious application to execute arbitrary code within the context of a...

PT-2017-1047

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10, Kernel-3.18 Description The issue is related to an elevation of privilege vulnerability in Qualcomm media codecs, which could allow a local malicious application to execute arbitrary code within the context of a...

PT-2017-1045

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10, Kernel-3.18 Description The issue is related to an elevation of privilege vulnerability in Qualcomm media codecs, which could allow a local malicious application to execute arbitrary code within the context of a...

PT-2017-1046

Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10, Kernel-3.18 Description The issue is related to insufficient access control in Qualcomm media codecs for the Android operating system. It allows a remote attacker to execute arbitrary code. This problem can be use...

Google Nexus Qualcomm Media Codecs Elevation of Privilege Vulnerability

Android on Google Pixel XL, etc. is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA for use on Google Pixel XL smart devices, etc. Qualcomm Media Codecs is one of the Qualcomm Qualcomm Media Codecs is one of Qualcomm's multimedia codec components...

Google Nexus Qualcomm Media Codecs elevation of privilege vulnerability (CNVD-2016-12169)

Android on Google Pixel XL, etc. is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA for use on Google Pixel XL smart device, etc. Qualcomm Media Codecs is one of the Qualcomm Qualcomm Media Codecs is one of Qualcomm's multimedia codec components. ...

Google Nexus Qualcomm Media Codecs elevation of privilege vulnerability (CNVD-2016-12168)

Android on Google Pixel XL, etc. is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA for use on Google Pixel XL smart device, etc. Qualcomm Media Codecs is one of the Qualcomm Qualcomm Media Codecs is one of Qualcomm's multimedia codec components. ...

Google Nexus Qualcomm Media Codecs elevation of privilege vulnerability (CNVD-2016-12167)

Android on Google Pixel XL, etc. is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA for use on Google Pixel XL smart device, etc. Qualcomm Media Codecs is one of the Qualcomm Qualcomm Media Codecs is one of Qualcomm's multimedia codec components. ...

Buffer overflow

Buffer overflow in codecs/on2/dec/SoftVPX.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 allows attackers to gain privileges via a crafted application, aka internal bug 29421675...

Buffer overflow

Multiple buffer overflows in codecs/mp3dec/SoftMP3.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 allow attackers to gain privileges via a crafted application, aka internal bug 29422022...

CVE-2016-3893

The wcdcalhwdepioctlshared function in sound/soc/codecs/wcdcal-hwdep.c in the Qualcomm sound codec in Android before 2016-09-05 on Nexus 6P devices does not properly copy firmware data, which allows attackers to obtain sensitive information via a crafted application, aka Android internal bug...

CVE-2016-3827

codecs/hevcdec/SoftHEVC.cpp in libstagefright in mediaserver in Android 6.0.1 before 2016-08-01 mishandles decoder errors, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 28816956...

CVE-2016-3830

codecs/aacdec/SoftAAC2.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows remote attackers to cause a denial of service device hang or reboot via crafted ADTS data, aka internal bug 29153599...

openSUSE Security Update : vlc (openSUSE-2016-754)

This update for vlc to 2.2.4 to fix the following security issue : - CVE-2016-5108: Fix out-of-bound write in adpcm QT IMA codec boo984382. This also include an update of codecs and libraries to fix these 3rd party security issues : - CVE-2016-1514: Matroska libebml EbmlUnicodeString Heap...

Security update for vlc (important)

This update for vlc to 2.2.4 to fix the following security issue: - CVE-2016-5108: Fix out-of-bound write in adpcm QT IMA codec boo984382. This also include an update of codecs and libraries to fix these 3rd party security issues: - CVE-2016-1514: Matroska libebml EbmlUnicodeString Heap Informati...

CVE-2016-2484

libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX buffer sizes for the GSM and G711 codecs, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature ...

CVE-2016-2485

libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX buffer sizes for the GSM and G711 codecs, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature ...