CVE-2017-0541

CVE-2017-0541 is a remote code execution vulnerability in Android’s Mediaserver (sonivox) that can be triggered by processing a specially crafted media file, causing memory corruption within Mediaserver. Affected Android versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1; Android ID A-34031018...

CVE-2017-0543

A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the...

CVE-2017-0538

A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the...

CVE-2017-0558

An information disclosure vulnerability in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access data without permission. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0....

CVE-2017-0557

An information disclosure vulnerability in libmpeg2 in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access data without permission. Product: Android. Versions: 6.0, 6.0.1, 7.0,...

CVE-2017-0552

A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1...

CVE-2017-0540

A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the...

CVE-2017-0557

CVE-2017-0557 is an information-disclosure vulnerability in libmpeg2 within Android’s Mediaserver. A local attacker could access data outside of the app’s permission level due to a flaw in Mediaserver’s handling of media processing. Affected Android versions include 6.0, 6.0.1, 7.0, and 7.1.1. Th...

CVE-2017-0538

CVE-2017-0538 is a remote code execution vulnerability in libavc used by Android Mediaserver. A specially crafted media file can trigger memory corruption during processing, allowing code execution within Mediaserver. Affected Android versions: 6.0, 6.0.1, 7.0, 7.1.1. Root cause: memory corruptio...

CVE-2017-0551

A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1...

CVE-2017-0540

CVE-2017-0540 describes a remote code execution in the Android Mediaserver’s libhevc component. The underlying issue is a memory corruption vulnerability triggered by specially crafted media files during processing, enabling code execution within the Mediaserver process. Affected Android versions...

CVE-2017-0539

CVE-2017-0539: A remote code execution in libhevc/Mediaserver on Android. A crafted media file can trigger memory corruption within Mediaserver. Affected Android versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Impact: potential remote code execution within Mediaserver. Remediation: patches releas...

CVE-2017-0558

CVE-2017-0558 is an information-disclosure vulnerability in the Android Mediaserver. A local malicious application could access data outside its permission levels on affected Android versions (4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1). The CVSS scores in the initial description indicate a conf...

CVE-2017-0547

An information disclosure vulnerability in libmedia in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it is a general bypass for operating system protections that isolate application data from other...

CVE-2017-0551

CVE-2017-0551 is a remote denial-of-service vulnerability in Android’s Mediaserver Libavc implementation. It affects Android 6.0, 6.0.1, 7.0, and 7.1.1, where processing a specially crafted file could cause a device hang or reboot. Public details in the provided documents describe the issue and a...

CVE-2017-0543

CVE-2017-0543: A remote code execution vulnerability in libavc within Mediaserver could allow memory corruption via a specially crafted media/file, leading to code execution in the Mediaserver process. Affected product: Android devices; versions include 6.0, 6.0.1, 7.0, and 7.1.1. Root cause desc...

CVE-2017-0542

CVE-2017-0542 is a remote code execution vulnerability in libavc within Android’s Mediaserver. According to connected documents, it affects Android 6.0, 6.0.1, 7.0, and 7.1.1, with the root cause described as memory corruption during media file and data processing when handling specially crafted ...

CVE-2017-0556

An information disclosure vulnerability in libmpeg2 in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access data without permission. Product: Android. Versions: 6.0, 6.0.1, 7.0,...

CVE-2017-0549

A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1...

CVE-2017-0539

A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the...