CVE-2016-3756

CVE-2016-3756 : Tremolo/res012.c in mediaserver on Android affects 4.x up to 4.4.3/4.4.4, 5.0.x up to 5.0.2, 5.1.x up to 5.1.1, and 6.x up to 2016-07-01. The issue arises because Tremolo’s mediaserver component does not validate the number of partitions in crafted media files, allowing a remote a...

CVE-2016-3747

CVE-2016-3747 is a use-after-free vulnerability in the mm-video-v4l2 venc component of Android’s Mediaserver. The flaw affects Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01. Exploitation could allow a crafted application to escalate privileges, demons...

CVE-2016-3764

media/libmediaplayerservice/MetadataRetrieverClient.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to obtain sensitive pointer information via a crafted application, aka internal bug 28377502...

CVE-2016-3765

decoder/impeg2dbitstream.c in mediaserver in Android 6.x before 2016-07-01 allows attackers to obtain sensitive information from process memory or cause a denial of service out-of-bounds read via a crafted application, aka internal bug 28168413...

CVE-2016-3755

CVE-2016-3755 affects the Android Mediaserver component, specifically decoder/ih264d_parse_pslice.c, where Mediaserver on Android 6.x before 2016-07-01 does not properly select concealment frames. This can allow a remote attacker to cause a denial of service (device hang or reboot) via a crafted ...

CVE-2016-3764

CVE-2016-3764 affects Android Mediaserver: media/libmediaplayerservice/MetadataRetrieverClient.cpp in mediaserver is vulnerable. A crafted application can cause information disclosure by obtaining sensitive pointer information. Affected Android versions include 4.x before 4.4.4, 5.0.x before 5.0....

CVE-2016-3756

Tremolo/res012.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate the number of partitions, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug...

CVE-2016-3754

mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not limit process-memory usage, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 28615448...

CVE-2016-3755

decoder/ih264dparsepslice.c in mediaserver in Android 6.x before 2016-07-01 does not properly select concealment frames, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 28470138...

CVE-2016-2505

mpeg2ts/ATSParser.cpp in libstagefright in mediaserver in Android 6.x before 2016-07-01 does not validate a certain section length, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 28333006...

CVE-2016-2508

CVE-2016-2508 affects media/libmediaplayerservice/nuplayer/GenericSource.cpp in Mediaserver on Android 4.x (pre-4.4.4), 5.0.x (pre-5.0.2), 5.1.x (pre-5.1.1), and 6.x (pre‑2016-07-01). A crafted media file can cause memory corruption or arbitrary code execution due to improper validation of certai...

CVE-2016-3753

mediaserver in Android 4.x before 4.4.4 allows remote attackers to obtain sensitive information via unspecified vectors, aka internal bug 27210135...

CVE-2016-3746

Use-after-free vulnerability in the mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem...

CVE-2016-3766

MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not check whether memory allocation succeeds, which allows remote attackers to cause a denial of service device hang or reboot via a crafted file...

CVE-2016-3765

CVE-2016-3765 affects Android 6.x Mediaserver, specifically the decoder/impeg2d_bitstream.c component. The flaw allows an attacker-controlled crafted app to trigger an out-of-bounds read in Mediaserver during media file processing, enabling potential information disclosure from process memory and...

CVE-2016-3743

CVE-2016-3743 affects Android 6.x Mediaserver: the file decoder/ih264d_api.c in mediaserver may have uninitialized data structures, enabling remote attackers to trigger memory corruption and potentially achieve remote code execution or cause a denial of service when processing a crafted media fil...

CVE-2016-3746

CVE-2016-3746 is a use-after-free vulnerability in the mm-video-v4l2 vdec component of Mediaserver on Android. It affects Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01. The underlying issue is a use-after-free that can allow attackers to escalate priv...

CVE-2016-2506

CVE-2016-2506 affects Android Mediaserver (libstagefright DRMExtractor.cpp). The vulnerability arises from missing validation of a certain offset value in media processing, enabling a remote attacker to execute arbitrary code or cause memory corruption via a crafted media file. Affected Android v...

CVE-2016-3743

decoder/ih264dapi.c in mediaserver in Android 6.x before 2016-07-01 does not initialize certain data structures, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 27907656...

CVE-2016-3754

CVE-2016-3754 affects Android Mediaserver: Mediaserver in Android versions 4.x up to 4.4.4, 5.x up to 5.0.2/5.1.x up to 5.1.1, and 6.x up to 2016-07-01 mishandles memory limits for process memory, allowing remote attackers to cause a denial of service (device hang or reboot) by feeding a crafted ...