CVE-2015-6596

Technical details for CVE-2015-6596 are not publicly provided in the connected documents. The initial entry notes privileges via crafted apps in Android before 5.1.1, but no vendor/version-specific technical details, fixes, or exploitation information are included here. Monitor for updates.

CVE-2015-7717

mediaserver in Android 5.x before 5.1.1 LMY48T and 6.0 before 2015-10-01 allows attackers to gain privileges via a crafted application, aka internal bug 19573085, a different vulnerability than CVE-2015-6596...

CVE-2015-6605

CVE-2015-6605 concerns the Android mediaserver component. In affected Android releases prior to 5.1.1 LMY48T, a denial-of-service condition can be triggered in mediaserver, causing a process crash via unspecified vectors. The vulnerability is linked to internal bugs 20915134 and 23142203 and is d...

CVE-2015-6596

mediaserver in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, aka internal bugs 20731946 and 20719651, a different vulnerability than CVE-2015-7717...

CVE-2015-6605: Undefined Security Weakness

mediaserver in Android before 5.1.1 LMY48T allows attackers to cause a denial of service process crash via unspecified vectors, aka internal bugs 20915134 and 23142203, a different vulnerability than CVE-2015-7718...

CVE-2015-7717: Undefined Security Weakness

mediaserver in Android 5.x before 5.1.1 LMY48T and 6.0 before 2015-10-01 allows attackers to gain privileges via a crafted application, aka internal bug 19573085, a different vulnerability than CVE-2015-6596...

CVE-2015-7718: Undefined Security Weakness

mediaserver in Android 5.x before 5.1.1 LMY48T and 6.0 before 2015-10-01 allows attackers to cause a denial of service process crash via unspecified vectors, aka internal bug 22278703, a different vulnerability than CVE-2015-6605...

CVE-2015-6596: Undefined Security Weakness

mediaserver in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, aka internal bugs 20731946 and 20719651, a different vulnerability than CVE-2015-7717...

CVE-2015-3862: Undefined Security Weakness

mediaserver in Android before 5.1.1 LMY48T allows attackers to cause a denial of service process crash via unspecified vectors, aka internal bug 22954006...

Google releases Security Patch for Android Stagefright 2.0 Vulnerability

Google reportedly fixed the latest round of Stagefright vulnerabilities in Android, pushing its latest over-the-air OTA update to Nexus devices. Last week, researchers warned of Stagefright 2.0 vulnerability that affected more than one Billion Android devices dating back to the latest versions of...

Google Patches Stagefright 2.0 in Android OTA Nexus Update

Google today patched the latest round of Stagefright vulnerabilities in Android, pushing them out as part of its latest over-the-air update to Nexus devices. Stagefright 2.0, as it’s come to be known, affected the Stagefright media playback engine in Android and one billion devices dating back to...

CVE-2015-3864

Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted MPEG-4 data, aka internal bug 23034759. NOTE: this vulnerability exists because of an...

CVE-2015-3861

Multiple integer overflows in the addVorbisCodecInfo function in matroska/MatroskaExtractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allow remote attackers to cause a denial of service device inoperability via crafted Matroska data, aka internal bug 21296336...

CVE-2015-3842

Multiple heap-based buffer overflows in libeffects in the Audio Policy Service in mediaserver in Android before 5.1.1 LMY48I allow attackers to execute arbitrary code via a crafted application, aka internal bug 21953516...

CVE-2015-3831

Buffer overflow in the readAt function in BpMediaHTTPConnection in media/libmedia/IMediaHTTPConnection.cpp in the mediaserver service in Android before 5.1.1 LMY48I allows attackers to execute arbitrary code via a crafted application, aka internal bug 19400722...

CVE-2015-3826

The MPEG4Extractor::parse3GPPMetaData function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not enforce a minimum size for UTF-16 strings containing a Byte Order Mark BOM, which allows remote attackers to cause a denial of service integer underflow, buffer over-read...

Buffer overflow

Buffer overflow in the readAt function in BpMediaHTTPConnection in media/libmedia/IMediaHTTPConnection.cpp in the mediaserver service in Android before 5.1.1 LMY48I allows attackers to execute arbitrary code via a crafted application, aka internal bug 19400722...

Heap overflow

Multiple heap-based buffer overflows in libeffects in the Audio Policy Service in mediaserver in Android before 5.1.1 LMY48I allow attackers to execute arbitrary code via a crafted application, aka internal bug 21953516...

CVE-2015-3842

Multiple heap-based buffer overflows in libeffects in the Audio Policy Service in mediaserver in Android before 5.1.1 LMY48I allow attackers to execute arbitrary code via a crafted application, aka internal bug 21953516...

Integer overflow

Multiple integer overflows in the addVorbisCodecInfo function in matroska/MatroskaExtractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allow remote attackers to cause a denial of service device inoperability via crafted Matroska data, aka internal bug 21296336...