CVE-2017-0600

A remote denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2,...

CVE-2017-0589

A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the...

CVE-2017-0590

A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the...

CVE-2017-0588

CVE-2017-0588 describes a remote code execution vulnerability in Android’s Mediaserver, specifically in libstagefright’s id3/ID3.cpp. An attacker could exploit this by providing a specially crafted media file, triggering memory corruption during media/file processing. The issue affects Android ve...

CVE-2017-0599

CVE-2017-0599 is a remote denial-of-service vulnerability in Android’s Mediaserver, specifically the libhevc component. A specially crafted media file could cause a device hang or reboot. Affected products/versions in the provided documents: Android 6.0–7.1.2. The description in the connected sou...

CVE-2017-0589

CVE-2017-0589 is a remote code execution vulnerability in libhevc used by the Android Mediaserver . A specially crafted media file could cause memory corruption during processing, enabling code execution within Mediaserver. Affected Android versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. T...

CVE-2017-0592

A remote code execution vulnerability in FLACExtractor.cpp in libstagefright in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution...

CVE-2017-0635

CVE-2017-0635 describes a remote denial-of-service in Android’s Mediaserver, via HevcUtils.cpp in libstagefright. An attacker can craft a file that causes a device hang or reboot. Affected products/versions (per the provided doc): Android 7.0, 7.1.1, and 7.1.2. The vulnerability arises from proce...

CVE-2017-0595

Mode C: CVE-2017-0595 affects Android Mediaserver (libstagefright) and is an elevation-of-privilege flaw that could let a local malicious app execute code in the context of a privileged process. Affected products/versions include Android 4.4.4–7.1.1. Root cause is described as memory/process hand...

CVE-2017-0594

An elevation of privilege vulnerability in codecs/aacenc/SoftAACEncoder2.cpp in libstagefright in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access ...

CVE-2017-0591

CVE-2017-0591 is a remote code execution vulnerability in libavc used by Android Mediaserver. A specially crafted media file could trigger memory corruption during media file and data processing, allowing an attacker to run code in the Mediaserver context. Affected products/versions include Andro...

CVE-2017-0591

A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the...

CVE-2017-0596

An elevation of privilege vulnerability in libstagefright in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are n...

Google Android Mediaserver Denial of Service Vulnerability (CNVD-2017-07547)

Google Android is a Linux-based operating system for smartphone devices. A denial of service vulnerability exists in Google Android Mediaserver, which can be exploited by remote attackers to construct malicious files and trick users into parsing them, which can crash the system...

Google Android Mediaserver elevation of privilege vulnerability (CNVD-2017-06873)

Google Android is a Linux-based operating system for smartphone devices. A security vulnerability exists in Google Android Mediaserver, which can be exploited by remote attackers to build malicious applications, execute arbitrary code, and elevate privileges...

Google Android Mediaserver Denial of Service Vulnerability (CNVD-2017-08228)

Google Android is a Linux-based operating system for smartphone devices. A denial of service vulnerability exists in Google Android Mediaserver, which can be exploited by remote attackers to construct malicious files and trick users into parsing them, which can crash the system...

LG G4 MRA58K - liblg_parser_mkv.so Bad Allocation Calls Exploit

Exploit for Android platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1102 In both of the following functions mkvparser::AudioTrack::AudioTrackmkvparser::Segment, mkvparser::Track::Info const&, long long, long long...

LG G4 MRA58K - mkvparser::Block::Block Heap Buffer Overflow

LG G4 MRA58K - mkvparser::Block::Block Heap Buffer Overflow Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1124 There are multiple paths in mkvparser::Block::Block... that result in heap buffer overflows. See attached for sample files that trigger the overflow conditions - thes...

LG G4 MRA58K - mkvparser::Block::Block Heap Buffer Overflows Exploit

Exploit for Android platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1124 There are multiple paths in mkvparser::Block::Block... that result in heap buffer overflows. See attached for sample files that trigger the overflow conditions - these will no...

Google Android Mediaserver elevation of privilege vulnerability (CNVD-2017-06872)

Google Android is a Linux-based operating system for smartphone devices. A security vulnerability exists in Google Android Mediaserver, which can be exploited by remote attackers to build malicious applications, execute arbitrary code, and elevate privileges...