CVE-2017-0736

A denial of service vulnerability in the Android media framework libavc. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-38487564...

CVE-2017-0730

CVE-2017-0730 is described as a denial-of-service in the Android media framework h264 decoder affecting Android 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The connected CNVD entry reiterates a DoS in the Media framework h264 decoder, but the provided documents do not specify the root cause, affected file...

CVE-2017-0734

A denial of service vulnerability in the Android media framework libavc. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-38014992...

CVE-2017-0731

A elevation of privilege vulnerability in the Android media framework mpeg4 encoder. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36075363...

CVE-2017-0735

A denial of service vulnerability in the Android media framework libavc. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-38239864...

CVE-2017-0714

A remote code execution vulnerability in the Android media framework h263 decoder. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36492637...

CVE-2017-0733

A denial of service vulnerability in the Android media framework libmediaplayerservice. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-38391487...

CVE-2017-0715

CVE-2017-0715 is a remote code execution vulnerability in Android’s media framework (libavc). Affected products/versions per the provided documents include Android 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The issue is described as RCE within the media framework libavc and is listed under the Android Se...

CVE-2017-0738

CVE-2017-0738 is an information-disclosure vulnerability in Android’s media framework audioserver affecting Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The connected documents identify the issue as a flaw in audioserver that can lead to leakage of sensitive informatio...

CVE-2017-0731

The CVE-2017-0731 entry corresponds to an elevation of privilege in the Android media framework (mpeg4 encoder). According to CNVD-2017-23424, the issue exists in Android’s Media framework mpeg4 encoder and could allow an attacker to execute arbitrary code with elevated privileges. The initial de...

CVE-2017-0718

CVE-2017-0718 is a remote code execution flaw in Android’s media framework MPEG-2 decoder impacting Android 6.0, 6.0.1, 7.0, 7.1.1 and 7.1.2. Public detail confirms it as a Media framework RCE issue; root cause is in the MPEG-2 decoder path. The Android Bulletin (Aug 2017) documents this and note...

CVE-2017-0722

A remote code execution vulnerability in the Android media framework h263 decoder. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37660827...

CVE-2017-0721

A remote code execution vulnerability in the Android media framework libmpeg2. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37561455...

CVE-2017-0721

CVE-2017-0721 describes a remote code execution vulnerability in the Android media framework component libmpeg2. The issue affects Android platforms listed as versions 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2 (Android ID A-37561455). The connected sources corroborate that this is a media-framework RCE i...

CVE-2017-0732

A elevation of privilege vulnerability in the Android media framework libstagefright. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37504237...

CVE-2017-0745

CVE-2017-0745 is a remote code execution vulnerability in the Android media framework, specifically the avc decoder. Affected Android versions include 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The connected documents consistently describe the issue as a media-framework fault enablin...

CVE-2017-0732

CVE-2017-0732 is referenced in EulerOS security advisories as a vulnerability in OpenSSL/OpenSSL-based TLS key exchange. The connected Nessus/NASL entries describe that during TLS key exchange with a DH(E) cipher suite a server may send a very large prime, causing the client to hang while generat...

Google Patches 10 Critical Bugs in August Android Security Bulletin

Google patched 10 critical remote code execution bugs in its August Android Security Bulletin issued Monday. It warned the most severe RCE vulnerabilities could enable a remote attacker, using a specially crafted file, to execute arbitrary code within the context of a privileged process. The...

RHEL 7 : GStreamer (RHSA-2017:2060)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2060 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The following packages have been upgraded t...

Moderate: Red Hat Security Advisory: GStreamer security, bug fix, and enhancement update

An update is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links ...