CVE-2015-9218

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, and...

Code injection

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, and...

CVE-2015-9218

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, and...

CVE-2015-9218

CVE-2015-9218 describes a hang in Android devices when processing certain HEVC clips, occurring on Qualcomm Snapdragon Mobile/Wear platforms (e.g., MSM8909W, SD 210/212/205, 400, 410/12, 425, 427, 430, 435, 450, 625, 650/52, 800, 808, 810, 820, 835, 845, SDM630/636/660, Snapdragon_High_Med_2016) ...

CVE-2015-9218: Undefined Security Weakness

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 427, SD 430, SD 435, SD 450, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, SD 845, SDM630, SDM636, SDM660, and...

PT-2018-4548

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue occurs when processing bad HEVC clips, causing the DPB to fill up. Due to the lack of error handling for a full DPB, the system hangs. This issue affects various...

CVE-2017-13230

In hevc codec, there is an out-of-bounds write due to an incorrect bounds check with the i2picwidthinlumasamples value. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 7.0,...

Out-of-bounds

In hevc codec, there is an out-of-bounds write due to an incorrect bounds check with the i2picwidthinlumasamples value. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 7.0,...

CVE-2017-13230

In hevc codec, there is an out-of-bounds write due to an incorrect bounds check with the i2picwidthinlumasamples value. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 7.0,...

CVE-2017-13230

CVE-2017-13230 affects the Android Media framework, specifically an out-of-bounds write in the HEVC (H.265) codec caused by an incorrect bounds check on i2_pic_width_in_luma_samples. This can enable remote escalation of privilege with no additional execution privileges required, though exploitati...

CVE-2017-13230

In hevc codec, there is an out-of-bounds write due to an incorrect bounds check with the i2picwidthinlumasamples value. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 7.0,...

CVE-2017-13230

In hevc codec, there is an out-of-bounds write due to an incorrect bounds check with the i2picwidthinlumasamples value. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 7.0,...

CVE-2017-13230: Out-of-bounds Write

In hevc codec, there is an out-of-bounds write due to an incorrect bounds check with the i2picwidthinlumasamples value. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 7.0,...

PT-2018-5519

Name of the Vulnerable Software and Affected Versions: Android versions 7.0 through 8.1 Description: The issue is related to an out-of-bounds write in the hevc codec due to an incorrect bounds check with the i2 pic width in luma samples value. This could lead to remote escalation of privilege wit...

CVE-2017-13230

In hevc codec, there is an out-of-bounds write due to an incorrect bounds check with the i2picwidthinlumasamples value. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 7.0,...

Google Android Media framework (libhevc) Information Disclosure Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, with the Media framework libhevc as a decoding library for multimedia development. libhevc is one of the hevc decoding...

CVE-2017-13214

In the hardware HEVC decoder, some media files could cause a page fault. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android...

CVE-2017-13214

In the hardware HEVC decoder, some media files could cause a page fault. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android...

CVE-2017-13214

CVE-2017-13214 affects the Hardware HEVC decoder in Android kernel. Affects Android devices processing certain media files, where a page fault can cause remote denial of service in a critical system process. Exploitation is possible over the network with no user interaction and no privileges requ...

CVE-2017-13214: Improper Input Validation

In the hardware HEVC decoder, some media files could cause a page fault. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android...