CVE-2016-2479

CVE-2016-2479 affects the mm-video-v4l2 vdec in Mediaserver on Android. The vulnerability arises from mishandling a buffer count, enabling a local attacker to elevate privileges to Signature or SignatureOrSystem via a crafted application. Affected Android versions include 4.x prior to 4.4.4, 5.0....

CVE-2016-2464

CVE-2016-2464 affects libvpx/libwebm in android mediaserver. A crafted MKV file can trigger memory corruption, enabling remote code execution or a denial of service. Affected: Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01. Root cause unspecified in pr...

CVE-2016-2484

CVE-2016-2484 affects libstagefright in mediaserver across Android 4.x up to 4.4.4, 5.x up to 5.0.2/5.1.1, and 6.x prior to 2016-06-01. The issue is that OMX buffer sizes for GSM and G711 codecs are not validated, enabling a crafted app to escalate privileges to Signature or SignatureOrSystem. Pr...

CVE-2016-2476

CVE-2016-2476 affects Mediaserver in Android (versions 4.x up to 4.4.3, 5.0.x up to 5.0.1, 5.1.x up to 5.1.0, and 6.x prior to 2016-06-01). The issue is improper validation of OMX buffer sizes, enabling a local attacker with a crafted app to gain privileges (Signature or SignatureOrSystem). The v...

CVE-2016-2477

mm-video-v4l2/vidc/vdec/src/omxvdecmsm8974.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles pointers, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or...

CVE-2016-2485

CVE-2016-2485 affects Android 4.x/5.x/6.x where libstagefright in mediaserver fails to validate OMX buffer sizes for GSM and G711 codecs, enabling privilege escalation via a crafted app (Signature or SignatureOrSystem). Affected Android versions include 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x...

CVE-2016-2483

Technical details about CVE-2016-2483 are not publicly provided in the supplied connected documents. The initial description lists affected Android versions and a buffer-count mishandling but no additional vendor/product specifics. Monitor for official updates and patches.

CVE-2016-2483

The mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSyste...

CVE-2016-2479

The mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSyste...

CVE-2016-2485

libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX buffer sizes for the GSM and G711 codecs, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature ...

CVE-2016-2464

libvpx in libwebm in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted mkv file, aka internal bug 23167726...

CVE-2016-2499

Technical details (affected products, root cause, remediation) are not publicly provided in the supplied documents for CVE-2016-2499. Monitor for updates.

CVE-2016-2482

The mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSyste...

CVE-2016-2499

AudioSource.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not initialize certain data, which allows attackers to obtain sensitive information via a crafted application, aka internal bug 27855172...

CVE-2016-2480

The mm-video-v4l2 vidc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate certain OMX parameter data structures, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining...

CVE-2016-2480

CVE-2016-2480 affects the mm-video-v4l2 vidc component in Mediaserver (Android 4.x up to 4.4.4, 5.0.x up to 5.0.2, 5.1.x up to 5.1.1, and 6.x prior to 2016-06-01). The root cause is improper validation of certain OMX parameter data structures, enabling a local attacker to gain privileges via a cr...

CVE-2016-2482

CVE-2016-2482 affects the mm-video-v4l2 vdec component in Android Mediaserver, where a faulty handling of a buffer count in versions prior to 4.4.4 (and 5.x/6.x ranges listed) enables a local attacker to gain privileges (Signature or SignatureOrSystem) via a crafted application. The issue is an e...

CVE-2016-2495

The CVE-2016-2495 issue affects Android Mediaserver (libstagefright) where SampleTable.cpp can trigger memory corruption during media processing, enabling a crafted file to cause a device hang or reboot. Affected platforms include Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, ...

CVE-2016-2477

CVE-2016-2477 is an Android Mediaserver privilege-escalation vulnerability caused by mishandled pointers in mm-video-v4l2/vidc/vdec/src/omx_vdec_msm8974.cpp. A local attacker could exploit a crafted file or payload to gain Signature or SignatureOrSystem privileges. Affected Android versions inclu...

CVE-2016-2487

CVE-2016-2487 affects libstagefright in the Mediaserver component of Android. A crafted application can escalate privileges to obtain Signature/SignatureOrSystem access on Android 4.x (before 4.4.4), 5.0.x (before 5.0.2), 5.1.x (before 5.1.1), and 6.x (before 2016-06-01). Impact is elevated privi...