CVE-2016-3756: Improper Input Validation

Tremolo/res012.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate the number of partitions, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug...

CVE-2016-3753: Exposure of Sensitive Information to an Unauthorized Actor

mediaserver in Android 4.x before 4.4.4 allows remote attackers to obtain sensitive information via unspecified vectors, aka internal bug 27210135...

CVE-2016-3741: Improper Input Validation

The H.264 decoder in mediaserver in Android 6.x before 2016-07-01 does not initialize certain slice data, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 28165661...

CVE-2016-2507: Improper Restriction of Operations within the Bounds of a Memory Buffer

Integer overflow in codecs/on2/h264dec/source/h264bsdstorage.c in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a...

CVE-2016-3746: Undefined Security Weakness

Use-after-free vulnerability in the mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem...

CVE-2016-3747: Undefined Security Weakness

Use-after-free vulnerability in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem...

CVE-2016-3745: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attackers to gain privileges via a crafted application that provides an AudioEffect reply, as demonstrated by obtaining Signature or SignatureOrSystem...

CVE-2016-3743: Improper Input Validation

decoder/ih264dapi.c in mediaserver in Android 6.x before 2016-07-01 does not initialize certain data structures, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 27907656...

CVE-2016-2505: Improper Restriction of Operations within the Bounds of a Memory Buffer

mpeg2ts/ATSParser.cpp in libstagefright in mediaserver in Android 6.x before 2016-07-01 does not validate a certain section length, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 28333006...

CVE-2016-2506: Improper Restriction of Operations within the Bounds of a Memory Buffer

DRMExtractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate a certain offset value, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a...

CVE-2016-3764: Improper Input Validation

media/libmediaplayerservice/MetadataRetrieverClient.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to obtain sensitive pointer information via a crafted application, aka internal bug 28377502...

CVE-2016-3742: Improper Input Validation

decoder/ih264dprocessintramb.c in mediaserver in Android 6.x before 2016-07-01 mishandles intra mode, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 28165659...

PT-2016-2475

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-01 Description The issue is related to the decoder/ih264d api.c file in the mediaserver of the Android operating system, which does not initialize certain data structures correctly. This allows remote attacker...

PT-2016-2381

Name of the Vulnerable Software and Affected Versions Android versions 4.x through 4.4.4 Android versions 5.0.x through 5.0.2 Android versions 5.1.x through 5.1.1 Android versions 6.x before 2016-07-01 Description The issue is caused by a buffer overflow in the DRMExtractor.cpp function of the...

PT-2016-2455

Name of the Vulnerable Software and Affected Versions Android versions 4.x through 4.4.4 Android versions 5.0.x through 5.0.2 Android versions 5.1.x through 5.1.1 Android versions 6.x before 2016-07-01 Description The issue exists due to insufficient input validation in the...

PT-2016-2465

Name of the Vulnerable Software and Affected Versions Android versions 4.x through 4.4.3 Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-07-01 Description The issue is related to the mediaserver in Android, which does not limit...

PT-2016-3121

Name of the Vulnerable Software and Affected Versions Android versions prior to 4.4.4 Android versions 5.0.x prior to 5.0.2 Android versions 5.1.x prior to 5.1.1 Android versions 6.x before 2016-07-01 Description The issue is related to a use-after-free vulnerability in the mm-video-v4l2 venc...

PT-2016-2476

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-01 Description The issue is related to the mishandling of intra mode in the decoder/ih264d process intra mb.c file within the mediaserver of Android. This allows remote attackers to execute arbitrary code or...

PT-2016-2463

Name of the Vulnerable Software and Affected Versions Android versions prior to 4.4.4 Android versions 5.0.x prior to 5.0.2 Android versions 5.1.x prior to 5.1.1 Android versions 6.x before 2016-07-01 Description The issue is related to the lack of partition number validation in the...

PT-2016-2477

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-07-01 Description The issue is related to the H.264 decoder in the mediaserver of the Android operating system, which is connected to data initialization errors. Exploitation of this issue may allow a remote...