CVE-2016-3835

The secure-session feature in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 mishandles heap pointers, which allows attackers to obtain sensitive information via a crafted application, aka internal bug...

CVE-2016-3828

decoder/ih264dapi.c in mediaserver in Android 6.x before 2016-08-01 mishandles invalid PPS and SPS NAL units, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 28835995...

CVE-2016-3827

codecs/hevcdec/SoftHEVC.cpp in libstagefright in mediaserver in Android 6.0.1 before 2016-08-01 mishandles decoder errors, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 28816956...

Google Android Mediaserver Remote Code Execution Vulnerability (CNVD-2016-06118)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A remote code execution vulnerability exists remotely in Mediaserver in Android. An attacker can exploit this vulnerability to cause...

Google Android Mediaserver Remote Code Execution Vulnerability (CNVD-2016-06119)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA in the U.S. Mediaserver is one of the multimedia service components. A remote code execution vulnerability exists in Mediaserver in Android. A remote attacker could exploit this...

Google Android Mediaserver Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. An elevation of privilege vulnerability exists in Mediaserver in Android. An attacker can exploit this vulnerability to execute...

Google Android Mediaserver elevation of privilege vulnerability (CNVD-2016-06126)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A security vulnerability exists in Mediaserver in Android, which can be exploited by a remote attacker to build special applications, induce application parsing, and elevate privileges...

Google Android Mediaserver elevation of privilege vulnerability (CNVD-2016-06127)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A security vulnerability exists in Mediaserver in Android, which can be exploited by a remote attacker to build special applications, induce application parsing, and elevate privileges...

Google Android Mediaserver Denial of Service Vulnerability (CNVD-2016-06128)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A denial of service vulnerability exists in Mediaserver in Android. An attacker can exploit this vulnerability to cause a device to...

Google Android Mediaserver Denial of Service Vulnerability (CNVD-2016-06129)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A denial of service vulnerability exists in Mediaserver in Android. An attacker can exploit this vulnerability to cause a device to...

Google Android Information Disclosure Vulnerability (CNVD-2016-06134)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A security vulnerability exists in Mediaserver in Android, which can be exploited by a remote attacker to build a special application and induce the application to parse and access...

Google Android Mediaserver Denial of Service Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A denial of service vulnerability exists in Mediaserver in Android. An attacker can exploit this vulnerability to cause a device to...

Google Android Mediaserver Remote Code Execution Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A remote code execution vulnerability exists in Mediaserver in Android. A remote attacker could exploit this vulnerability to cause...

PT-2016-2558

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-01 Description The issue is related to the ih264d decoder in the mediaserver of Android, where certain structure members are not initialized. This allows remote attackers to cause a denial of service, resultin...

PT-2016-2562

Name of the Vulnerable Software and Affected Versions Android versions 4.x through 4.4.3 Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-08-01 Description The issue is related to the omx/OMXNodeInstance.cpp method in the libstagefright...

PT-2016-2668

Name of the Vulnerable Software and Affected Versions Android versions 4.x through 4.4.3 Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-08-01 Description The secure-session feature in the mm-video-v4l2 venc component of the mediaserver i...

PT-2016-2670

Name of the Vulnerable Software and Affected Versions Android versions 4.x through 4.4.3 Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-08-01 Description The secure-session feature in the mm-video-v4l2 venc component of the mediaserver i...

PT-2016-2669

Name of the Vulnerable Software and Affected Versions Android versions prior to 4.4.4 Android versions 5.0.x prior to 5.0.2 Android versions 5.1.x prior to 5.1.1 Android versions 6.x before 2016-08-01 Description The issue is related to a lack of validation for the reply size of an AudioFlinger...

PT-2016-2545

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the mediaserver component in Android, which has inadequate access control. This allows attackers to gain privileges via a crafted application. The estimated number of...

PT-2016-2561

Name of the Vulnerable Software and Affected Versions Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-08-01 Description The issue is related to the allocation of an incorrect amount of memory in the mm-video-v4l2/vidc/venc/src/omx video...