CVE-2016-2487

CVE-2016-2487 affects libstagefright in the Mediaserver component of Android. A crafted application can escalate privileges to obtain Signature/SignatureOrSystem access on Android 4.x (before 4.4.4), 5.0.x (before 5.0.2), 5.1.x (before 5.1.1), and 6.x (before 2016-06-01). Impact is elevated privi...

CVE-2016-2478

mm-video-v4l2/vidc/vdec/src/omxvdecmsm8974.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles pointers, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or...

CVE-2016-2478

CVE-2016-2478 affects Android Mediaserver, specifically mm-video-v4l2/vidc/vdec/src/omx_vdec_msm8974.cpp in mediaserver. The root cause is mishandling of pointers, allowing a crafted app to gain privileges (Signature or SignatureOrSystem). Affected Android versions: 4.x before 4.4.4, 5.0.x before...

CVE-2016-2486

CVE-2016-2486 affects Android Mediaserver’s libstagefright component (mp3dec/SoftMP3.cpp). The flaw stems from not validating the relationship between allocated memory and the frame size, enabling memory corruption that can be exploited by a crafted Android app to gain privileges (Signature or Si...

CVE-2016-2481

CVE-2016-2481 affects the mm-video-v4l2 venc component in Android Mediaserver. It arises from how Mediaserver mishandles a buffer count, enabling a local attacker to gain privileges (Signature or SignatureOrSystem) via a crafted app. Affected are Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1....

CVE-2016-2481

The mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSyste...

Android Mediaserver elevation of privilege vulnerability (CNVD-2016-03964)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. An elevation vulnerability exists in Android's Mediaserver, which can be exploited by a local attacker to execute arbitrary code wit...

Android Mediaserver elevation of privilege vulnerability (CNVD-2016-03965)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. An elevation vulnerability exists in Android's Mediaserver, which can be exploited by a local attacker to execute arbitrary code wit...

Android Mediaserver elevation of privilege vulnerability (CNVD-2016-03921)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA in the U.S. Mediaserver is one of the multimedia service components. An elevation of privilege vulnerability exists in Android's Mediaserver. A local attacker can exploit this...

Android Mediaserver Privilege Mobilization Vulnerability (CNVD-2016-03924)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. An elevation vulnerability exists in Android's Mediaserver, which can be exploited by a local attacker to execute arbitrary code wit...

Android Mediaserver Privilege Mobilization Vulnerability (CNVD-2016-03925)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. An elevation vulnerability exists in Android's Mediaserver, which can be exploited by a local attacker to execute arbitrary code wit...

Android Mediaserver elevation of privilege vulnerability (CNVD-2016-03967)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA in the U.S. Mediaserver is one of the multimedia service components. An elevation vulnerability exists in Android's Mediaserver, which can be exploited by a local attacker to execut...

Android Mediaserver Remote Denial of Service Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A remote denial of service vulnerability exists in Android's Mediaserver. An attacker can exploit this vulnerability to cause a deni...

Android Mediaserver Privilege Mobilization Vulnerability (CNVD-2016-03923)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. An elevation vulnerability exists in Android's Mediaserver, which can be exploited by a local attacker to execute arbitrary code wit...

Android Mediaserver elevation of privilege vulnerability (CNVD-2016-03919)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. An elevation of privilege vulnerability exists in Android's Mediaserver. A local attacker can exploit this vulnerability to execute...

Android Mediaserver Privilege Mobilization Vulnerability (CNVD-2016-03926)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. An elevation vulnerability exists in Android's Mediaserver, which can be exploited by a local attacker to execute arbitrary code wit...

Android Mediaserver elevation of privilege vulnerability (CNVD-2016-03966)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA in the U.S. Mediaserver is one of the multimedia service components. An elevation vulnerability exists in Android's Mediaserver, which can be exploited by a local attacker to execut...

Android Mediaserver elevation of privilege vulnerability (CNVD-2016-03963)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. An elevation vulnerability exists in Android's Mediaserver, which can be exploited by a local attacker to execute arbitrary code wit...

Android Mediaserver Remote Code Execution Vulnerability (CNVD-2016-03851)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A remote code execution vulnerability exists in Android's Mediaserver. An attacker could exploit this vulnerability with a specially...

Android Mediaserver elevation of privilege vulnerability (CNVD-2016-03857)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA in the U.S. Mediaserver is one of the multimedia service components. An elevation of privilege vulnerability exists in Android's Mediaserver. A local attacker can exploit this...