CVE-2016-3742

decoder/ih264dprocessintramb.c in mediaserver in Android 6.x before 2016-07-01 mishandles intra mode, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 28165659...

CVE-2016-3745

Multiple buffer overflows in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attackers to gain privileges via a crafted application that provides an AudioEffect reply, as demonstrated by obtaining Signature or SignatureOrSystem...

CVE-2016-3746

Use-after-free vulnerability in the mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem...

CVE-2016-3747

Use-after-free vulnerability in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem...

CVE-2016-3753

mediaserver in Android 4.x before 4.4.4 allows remote attackers to obtain sensitive information via unspecified vectors, aka internal bug 27210135...

CVE-2016-3754

mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not limit process-memory usage, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 28615448...

CVE-2016-3755

decoder/ih264dparsepslice.c in mediaserver in Android 6.x before 2016-07-01 does not properly select concealment frames, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 28470138...

CVE-2016-3756

Tremolo/res012.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate the number of partitions, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug...

CVE-2016-3764

media/libmediaplayerservice/MetadataRetrieverClient.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to obtain sensitive pointer information via a crafted application, aka internal bug 28377502...

CVE-2016-3765

decoder/impeg2dbitstream.c in mediaserver in Android 6.x before 2016-07-01 allows attackers to obtain sensitive information from process memory or cause a denial of service out-of-bounds read via a crafted application, aka internal bug 28168413...

CVE-2016-3766

MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not check whether memory allocation succeeds, which allows remote attackers to cause a denial of service device hang or reboot via a crafted file...

CVE-2016-2506

CVE-2016-2506 affects Android Mediaserver (libstagefright DRMExtractor.cpp). The vulnerability arises from missing validation of a certain offset value in media processing, enabling a remote attacker to execute arbitrary code or cause memory corruption via a crafted media file. Affected Android v...

CVE-2016-2508

CVE-2016-2508 affects media/libmediaplayerservice/nuplayer/GenericSource.cpp in Mediaserver on Android 4.x (pre-4.4.4), 5.0.x (pre-5.0.2), 5.1.x (pre-5.1.1), and 6.x (pre‑2016-07-01). A crafted media file can cause memory corruption or arbitrary code execution due to improper validation of certai...

CVE-2016-3742

The CVE-2016-3742 entry affects Android 6.x Mediaserver (decoder/ih264d_process_intra_mb.c). A flaw in intra mode handling in Mediaserver could allow a remote attacker to execute arbitrary code or cause a denial of service (memory corruption) via a specially crafted media file. The issue is docum...

CVE-2016-3743

CVE-2016-3743 affects Android 6.x Mediaserver: the file decoder/ih264d_api.c in mediaserver may have uninitialized data structures, enabling remote attackers to trigger memory corruption and potentially achieve remote code execution or cause a denial of service when processing a crafted media fil...

CVE-2016-3745

CVE-2016-3745 describes multiple buffer overflows in Android’s Mediaserver that enable privilege escalation via a crafted application passing an AudioEffect reply, allowing access to Signature or SignatureOrSystem. The issue affects Android 4.x up to 4.4.3 and versions 5.0.x up to 5.0.1, as well ...

CVE-2016-3747

CVE-2016-3747 is a use-after-free vulnerability in the mm-video-v4l2 venc component of Android’s Mediaserver. The flaw affects Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01. Exploitation could allow a crafted application to escalate privileges, demons...

CVE-2016-3753

Technical details about CVE-2016-3753 are not publicly provided in the supplied documents. Mediaserver information disclosure vulnerability is described, but there is no version-specific or exploit information in the connected sources. Monitor for updates.

CVE-2016-3755

CVE-2016-3755 affects the Android Mediaserver component, specifically decoder/ih264d_parse_pslice.c, where Mediaserver on Android 6.x before 2016-07-01 does not properly select concealment frames. This can allow a remote attacker to cause a denial of service (device hang or reboot) via a crafted ...

CVE-2016-3764

CVE-2016-3764 affects Android Mediaserver: media/libmediaplayerservice/MetadataRetrieverClient.cpp in mediaserver is vulnerable. A crafted application can cause information disclosure by obtaining sensitive pointer information. Affected Android versions include 4.x before 4.4.4, 5.0.x before 5.0....