The vulnerability of the Android operating system allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Android operating system’s mediaserver component is caused by a buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely or cause a service failure memory corruption using a specially crafted media file...

Android mediaserver remote code execution vulnerability (CNVD-2016-00129)

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in the implementation of the mediaserver feature in version 5.x prior to Android 5.1.1 LMY49F, and version 6.0 prior to 2016-01-01. A remote attacker could exploit this vulnerability to execut...

CVE-2015-6636

mediaserver in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bugs 25070493 and 24686670...

CVE-2015-6636

mediaserver in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bugs 25070493 and 24686670...

Memory corruption

mediaserver in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bugs 25070493 and 24686670...

CVE-2015-6636

mediaserver in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bugs 25070493 and 24686670...

CVE-2015-6636

The CVE-2015-6636 issue affects Android Mediaserver. A remote attacker could execute arbitrary code or trigger memory corruption by processing a crafted media file in Mediaserver, on Android 5.x up to 5.1.1 (LMY49F) and Android 6.0 up to 2016-01-01. Root cause: memory corruption in mediaserver wh...

January 2016 Android Nexus Security Bulletin

Since last summer’s Stagefright vulnerabilities toppled the Android world for a few weeks, researchers inside and out of Google have been taking a close look at not only the maligned media playback engine, but also at Mediaserver where it lives. Today’s release of the monthly Android Nexus Securi...

Nexus Security Bulletin—January 2016Stay organized with collectionsSave and categorize content based on your preferences.

We have released a security update to Nexus devices through an over-the-air OTA update as part of our Android Security Bulletin Monthly Release process. The Nexus firmware images have also been released to the Google Developer site. Builds LMY49F or later and Android 6.0 with Security Patch Level...

CVE-2015-6636

mediaserver in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bugs 25070493 and 24686670...

Android mediaserver memory corruption vulnerability (CNVD-2015-08037)

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in mediaserver in Android versions prior to 5.1.1 LMY48Z, 6.0 2015-12-01, which can be exploited by a remote attacker to execute arbitrary code or cause a denial of service memory corruption v...

Android mediaserver memory corruption vulnerability

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in mediaserver, a version prior to Android 5.1.1 LMY48Z, which can be exploited by remote attackers to execute arbitrary code or cause a denial of service memory corruption via a constructed...

Android mediaserver memory corruption vulnerability (CNVD-2015-08006)

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in mediaserver in Android versions prior to 5.1.1 LMY48Z, 6.0 2015-12-01 and prior to 6.0 2015-12-01, which can be exploited by remote attackers to execute arbitrary code or cause a denial of...

Android mediaserver memory corruption vulnerability (CNVD-2015-08005)

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in mediaserver in Android version 6.0, which can be exploited by remote attackers to execute arbitrary code or cause a denial of service memory corruption via a constructed media file...

CVE-2015-8507

mediaserver in Android 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 24157524, a different vulnerability than CVE-2015-6616, CVE-2015-8505, and CVE-2015-8506...

CVE-2015-8506

mediaserver in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 24441553, a different vulnerability than CVE-2015-6616, CVE-2015-8505, and CVE-2015-8507...

CVE-2015-8505

mediaserver in Android before 5.1.1 LMY48Z allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 17769851, a different vulnerability than CVE-2015-6616, CVE-2015-8506, and CVE-2015-8507...

Memory corruption

mediaserver in Android before 5.1.1 LMY48Z allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 17769851, a different vulnerability than CVE-2015-6616, CVE-2015-8506, and CVE-2015-8507...

CVE-2015-6616

mediaserver in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bugs 24630158 and 23882800, a different vulnerability than CVE-2015-8505, CVE-2015-8506, and...

CVE-2015-8507

mediaserver in Android 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 24157524, a different vulnerability than CVE-2015-6616, CVE-2015-8505, and CVE-2015-8506...