CVE-2017-0558

CVE-2017-0558 is an information-disclosure vulnerability in the Android Mediaserver. A local malicious application could access data outside its permission levels on affected Android versions (4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1). The CVSS scores in the initial description indicate a conf...

CVE-2017-0556

CVE-2017-0556 is an information-disclosure vulnerability in libmpeg2 used by Mediaserver on Android (versions 6.0–7.1.1). The root cause is data exposure due to Mediaserver’s handling of media data via libmpeg2, enabling a local attacker to access data outside its permissions. Impact is confident...

CVE-2017-0550

CVE-2017-0550 corresponds to a remote denial-of-service in libavc within Android’s Mediaserver. The vulnerability affects Android 6.0–7.1.1 and could be triggered by a specially crafted file, potentially causing device hang or reboot. Connected documents corroborate the Mediaserver/libavc context...

CVE-2017-0540

CVE-2017-0540 describes a remote code execution in the Android Mediaserver’s libhevc component. The underlying issue is a memory corruption vulnerability triggered by specially crafted media files during processing, enabling code execution within the Mediaserver process. Affected Android versions...

CVE-2017-0552

A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1...

CVE-2017-0557

CVE-2017-0557 is an information-disclosure vulnerability in libmpeg2 within Android’s Mediaserver. A local attacker could access data outside of the app’s permission level due to a flaw in Mediaserver’s handling of media processing. Affected Android versions include 6.0, 6.0.1, 7.0, and 7.1.1. Th...

CVE-2017-0557

An information disclosure vulnerability in libmpeg2 in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access data without permission. Product: Android. Versions: 6.0, 6.0.1, 7.0,...

CVE-2017-0551

CVE-2017-0551 is a remote denial-of-service vulnerability in Android’s Mediaserver Libavc implementation. It affects Android 6.0, 6.0.1, 7.0, and 7.1.1, where processing a specially crafted file could cause a device hang or reboot. Public details in the provided documents describe the issue and a...

CVE-2017-0552

CVE-2017-0552 affects Android Mediaserver (libavc). A remote attacker could craft a file to trigger a denial of service, causing a device hang or reboot. Affected Android versions: 6.0, 6.0.1, 7.0, 7.1.1. The initial description and connected sources identify the issue as a remote DoS in Mediaser...

CVE-2017-0549

CVE-2017-0549 describes a remote denial-of-service vulnerability in Mediaserver’s libavc component used by Android. A specially crafted file could cause memory/processing issues in Mediaserver, allowing a device hang or reboot. Affected products/versions cited: Android 6.0, 6.0.1, 7.0, 7.1.1. The...

CVE-2017-0543

CVE-2017-0543: A remote code execution vulnerability in libavc within Mediaserver could allow memory corruption via a specially crafted media/file, leading to code execution in the Mediaserver process. Affected product: Android devices; versions include 6.0, 6.0.1, 7.0, and 7.1.1. Root cause desc...

CVE-2017-0543

A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the...

Google Android Mediaserver Multiple Denial of Service Vulnerabilities（CVE-2017-0392）

VBRISeeker::CreateFromSource may cause an uncaught c++ exception due to trying to allocate a buffer where the size is attacker controllable. Fix: https://android.googlesource.com/platform/frameworks/av/+/453b351ac5bd2b6619925dc966da60adf6b3126c PoC:...

CVE-2017-0541

A remote code execution vulnerability in sonivox in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the...

CVE-2017-0539

A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the...

CVE-2017-0538

A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the...

CVE-2017-0542

A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the...

CVE-2017-0543

A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the...

Android HDCP Denial of Service Vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. Android HDCP denial-of-service vulnerability exists because the encrypt interface provided by the HDCP service High-bandwidth Digital Content Protection does not perform strict paramet...

Google Android Setup Wizard Denial of Service Vulnerability

Google Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A denial of service vulnerability exists in Google Android Setup Wizard. An attacker can exploit this vulnerability to cause ...