CVE-2016-0815

CVE-2016-0815 affects the mediaserver component of Android, specifically the MPEG4Source::fragmentedRead function in MPEG4Extractor.cpp within libstagefright. The vulnerability exists on Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01, where processing a crafted media...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information or bypass security mechanisms

The vulnerability of the libstagefright library in the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, acting remotely, to obtain confidential information or bypass security mechanisms...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information or bypass security mechanisms

The vulnerability of the libstagefright library in the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, acting remotely, to obtain confidential information or bypass security mechanisms...

Mozilla: Memory leak in libstagefright when deleting an array during MP4 processing (MFSA 2016-20)

Memory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to cause a denial of service memory consumption via an MPEG-4 file that triggers a delete operation on an array...

firefox: multiple issues

CVE-2016-1952 CVE-2016-1953 arbitrary code execution Mozilla developers fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough...

FreeBSD : mozilla -- multiple vulnerabilities (2225c5b4-1e5a-44fc-9920-b3201c384a15)

Mozilla Foundation reports : MFSA 2016-16 Miscellaneous memory safety hazards rv:45.0 / rv:38.7 MFSA 2016-17 Local file overwriting and potential privilege escalation through CSP reports MFSA 2016-18 CSP reports fail to strip location information for embedded iframe pages MFSA 2016-19 Linux video...

CVE-2016-1957

Memory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to cause a denial of service memory consumption via an MPEG-4 file that triggers a delete operation on an array...

UBUNTU-CVE-2016-1957

Memory leak in libstagefright in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 allows remote attackers to cause a denial of service memory consumption via an MPEG-4 file that triggers a delete operation on an array...

Memory leak in libstagefright when deleting an array during MP4 processing — Mozilla

Security researchers Jose Martinez and Romina Santillan reported a memory leak in the libstagefright library when array destruction occurs during MPEG4 video file processing...

The vulnerability of the Firefox browser, which allows a violator to trigger a service failure or cause other effects

The vulnerability of the MoofParser::Metadata function located in moofParser.cpp in the Firefox browser’s libstagefright library is related to a buffer overflow in dynamic memory, caused by a numerical overflow. Exploiting this vulnerability could allow a remote attacker to cause a service failur...

CVE-2016-0815

The MPEG4Source::fragmentedRead function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file...

The vulnerability of the Android operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the SampleTable.cpp file of the Android operating system’s libstagefright component is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker, acting remotely, to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the Android operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the SampleTable.cpp file of the Android operating system’s libstagefright component is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker, acting remotely, to compromise the confidentiality, integrity, and accessibility of the protected...

UBUNTU-CVE-2016-0803

libstagefright in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file that triggers a large memory allocation in the 1 SoftMPEG4Encoder...

CVE-2016-0803

CVE-2016-0803 affects libstagefright in Android mediaserver (Mediaserver) by vulnerable memory allocation in the SoftMPEG4Encoder and SoftVPXEncoder components. A crafted media file can trigger remote code execution or memory corruption. Affected: Android 4.x before 4.4.4; 5.x before 5.1.1 LMY49G...

CVE-2016-0803

libstagefright in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file that triggers a large memory allocation in the 1 SoftMPEG4Encoder...

Mozilla Firefox Denial of Service Vulnerability (CNVD-2016-00847)

Mozilla Firefox on Android is an open source web browser for the Android platform. The 'MoofParser::Metadata' function in the binding/MoofParser.cpp file in the Mozilla Firefox libstagefright library fails to limit the size of the result of a read operation, allowing remote attackers to conduct...

CVE-2016-1946

The MoofParser::Metadata function in binding/MoofParser.cpp in libstagefright in Mozilla Firefox before 44.0 does not limit the size of read operations, which might allow remote attackers to cause a denial of service integer overflow and buffer overflow or possibly have unspecified other impact v...

Integer overflow

The MoofParser::Metadata function in binding/MoofParser.cpp in libstagefright in Mozilla Firefox before 44.0 does not limit the size of read operations, which might allow remote attackers to cause a denial of service integer overflow and buffer overflow or possibly have unspecified other impact v...

CVE-2016-1946

CVE-2016-1946 affects Mozilla Firefox on Android. The MoofParser::Metadata function in binding/MoofParser.cpp within libstagefright does not bound the size of read operations, allowing a crafted MP4 file to cause denial of service. The CNVD entry attributes a DoS impact to remote exploitation; no...