CVE-2015-6636

The CVE-2015-6636 issue affects Android Mediaserver. A remote attacker could execute arbitrary code or trigger memory corruption by processing a crafted media file in Mediaserver, on Android 5.x up to 5.1.1 (LMY49F) and Android 6.0 up to 2016-01-01. Root cause: memory corruption in mediaserver wh...

CVE-2015-6636: Improper Restriction of Operations within the Bounds of a Memory Buffer

mediaserver in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bugs 25070493 and 24686670...

January 2016 Android Nexus Security Bulletin

Since last summer’s Stagefright vulnerabilities toppled the Android world for a few weeks, researchers inside and out of Google have been taking a close look at not only the maligned media playback engine, but also at Mediaserver where it lives. Today’s release of the monthly Android Nexus Securi...

Nexus Security Bulletin—January 2016Stay organized with collectionsSave and categorize content based on your preferences.

We have released a security update to Nexus devices through an over-the-air OTA update as part of our Android Security Bulletin Monthly Release process. The Nexus firmware images have also been released to the Google Developer site. Builds LMY49F or later and Android 6.0 with Security Patch Level...

CVE-2015-6636

mediaserver in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bugs 25070493 and 24686670...

Android mediaserver memory corruption vulnerability (CNVD-2015-08037)

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in mediaserver in Android versions prior to 5.1.1 LMY48Z, 6.0 2015-12-01, which can be exploited by a remote attacker to execute arbitrary code or cause a denial of service memory corruption v...

Android mediaserver memory corruption vulnerability (CNVD-2015-08006)

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in mediaserver in Android versions prior to 5.1.1 LMY48Z, 6.0 2015-12-01 and prior to 6.0 2015-12-01, which can be exploited by remote attackers to execute arbitrary code or cause a denial of...

Android mediaserver memory corruption vulnerability (CNVD-2015-08005)

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in mediaserver in Android version 6.0, which can be exploited by remote attackers to execute arbitrary code or cause a denial of service memory corruption via a constructed media file...

Android mediaserver memory corruption vulnerability

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in mediaserver, a version prior to Android 5.1.1 LMY48Z, which can be exploited by remote attackers to execute arbitrary code or cause a denial of service memory corruption via a constructed...

CVE-2015-8507

mediaserver in Android 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 24157524, a different vulnerability than CVE-2015-6616, CVE-2015-8505, and CVE-2015-8506...

CVE-2015-8506

mediaserver in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 24441553, a different vulnerability than CVE-2015-6616, CVE-2015-8505, and CVE-2015-8507...

CVE-2015-8505

mediaserver in Android before 5.1.1 LMY48Z allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 17769851, a different vulnerability than CVE-2015-6616, CVE-2015-8506, and CVE-2015-8507...

CVE-2015-8505

mediaserver in Android before 5.1.1 LMY48Z allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 17769851, a different vulnerability than CVE-2015-6616, CVE-2015-8506, and CVE-2015-8507...

CVE-2015-8507

mediaserver in Android 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 24157524, a different vulnerability than CVE-2015-6616, CVE-2015-8505, and CVE-2015-8506...

Memory corruption

mediaserver in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 24441553, a different vulnerability than CVE-2015-6616, CVE-2015-8505, and CVE-2015-8507...

CVE-2015-6616

mediaserver in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bugs 24630158 and 23882800, a different vulnerability than CVE-2015-8505, CVE-2015-8506, and...

CVE-2015-8506

mediaserver in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 24441553, a different vulnerability than CVE-2015-6616, CVE-2015-8505, and CVE-2015-8507...

Memory corruption

mediaserver in Android 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 24157524, a different vulnerability than CVE-2015-6616, CVE-2015-8505, and CVE-2015-8506...

CVE-2015-6616

mediaserver in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bugs 24630158 and 23882800, a different vulnerability than CVE-2015-8505, CVE-2015-8506, and...

Memory corruption

mediaserver in Android before 5.1.1 LMY48Z allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 17769851, a different vulnerability than CVE-2015-6616, CVE-2015-8506, and CVE-2015-8507...