CVE-2016-6747: Improper Access Control

A denial of service vulnerability in Mediaserver in Android before 2016-11-05 could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Android ID: A-31244612. References: NVIDIA...

CVE-2016-6714: Improper Access Control

A remote denial of service vulnerability in Mediaserver in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Android ID:...

CVE-2016-6723: Improper Access Control

A denial of service vulnerability in Proxy Auto Config in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as...

CVE-2016-6713: Improper Access Control

A remote denial of service vulnerability in Mediaserver in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Android ID:...

Google Android Proxy Auto Config Denial of Service Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Proxy Auto-Config PAC is a Script-like component. A denial of service vulnerability exists in PAC in Android. A remote attacker can exploit this vulnerability to cause a...

Google Android Mediaserver Denial of Service Vulnerability (CNVD-2016-11050)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A denial of service vulnerability exists in Google Android Mediaserver. A remote attacker can exploit the vulnerability to cause the...

Google Android Mediaserver Denial of Service Vulnerability (CNVD-2016-11049)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A denial of service vulnerability exists in Google Android Mediaserver. A remote attacker can exploit the vulnerability to cause the...

Google Android Mediaserver Denial of Service Vulnerability (CNVD-2016-11047)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA in the U.S. Mediaserver is one of the multimedia service components. A denial of service vulnerability exists in Google Android Mediaserver. A remote attacker can exploit the...

CVE-2016-3920

id3/ID3.cpp in libstagefright in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows remote attackers to cause a denial of service device hang or reboot via a crafted file, aka internal bug 30744884...

PT-2016-5748

Name of the Vulnerable Software and Affected Versions Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-10-01 Android versions 7.0 before 2016-10-01 Description The issue allows remote attackers to cause a denial of service, resulting in a...

Null pointer dereference

arm-wt-22k/libsrc/easmdls.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 allows remote attackers to cause a denial of service NULL pointer dereference, and device hang or reboot via a crafted media file, aka internal bug 29770686...

CVE-2016-3881

The decoderpeeksiinternal function in vp9/vp9dxiface.c in libvpx in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 allows remote attackers to cause a denial of service buffer over-read, and device hang or reboot vi...

CVE-2016-3878

decoder/ih264dapi.c in mediaserver in Android 6.x before 2016-09-01 mishandles the case of decoding zero MBs, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 29493002...

PT-2016-5712

Name of the Vulnerable Software and Affected Versions Android versions 4.x through 4.4.3 Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-09-01 Android versions 7.0 before 2016-09-01 Description The issue allows remote attackers to cause a...

CVE-2016-3878: Improper Access Control

decoder/ih264dapi.c in mediaserver in Android 6.x before 2016-09-01 mishandles the case of decoding zero MBs, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 29493002...

PT-2016-2558

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-01 Description The issue is related to the ih264d decoder in the mediaserver of Android, where certain structure members are not initialized. This allows remote attackers to cause a denial of service, resultin...

Google Android Mediaserver Denial of Service Vulnerability (CNVD-2016-06129)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A denial of service vulnerability exists in Mediaserver in Android. An attacker can exploit this vulnerability to cause a device to...

CVE-2016-3827: Encoding Error

codecs/hevcdec/SoftHEVC.cpp in libstagefright in mediaserver in Android 6.0.1 before 2016-08-01 mishandles decoder errors, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 28816956...

PT-2016-2605

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the Qualcomm Wi-Fi driver in Android, which makes incorrect snprintf calls. This allows remote attackers to cause a denial of service, resulting in a device hang or reboo...

PT-2016-2559

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-01 Description The issue is related to the handling of invalid PPS and SPS NAL units in the decoder/ih264d api.c file within the mediaserver of Android. This can be exploited by remote attackers to cause a...