CVE-2016-2480: Improper Input Validation

The mm-video-v4l2 vidc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate certain OMX parameter data structures, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining...

CVE-2016-2476: Improper Restriction of Operations within the Bounds of a Memory Buffer

mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX buffer sizes, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug...

PT-2016-2134

Name of the Vulnerable Software and Affected Versions Android versions 4.x through 4.4.3 Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-06-01 Description The issue is related to the mediaserver in Android, which does not validate OMX...

PT-2016-2130

Name of the Vulnerable Software and Affected Versions Android versions prior to 4.4.4 Android versions 5.0.x prior to 5.0.2 Android versions 5.1.x prior to 5.1.1 Android versions 6.x before 2016-06-01 Description The issue is related to the lack of validation of certain OMX parameter data...

PT-2016-2132

Name of the Vulnerable Software and Affected Versions Android versions prior to 4.4.4 Android versions 5.0.x prior to 5.0.2 Android versions 5.1.x prior to 5.1.1 Android versions 6.x prior to 2016-06-01 Description The issue is related to the improper handling of pointers in the...

CVE-2016-2450

codecs/on2/enc/SoftVPXEncoder.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not validate OMX buffer sizes, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining...

CVE-2016-2450

CVE-2016-2450 affects Android Mediaserver (libstagefright) where codecs/on2/enc/SoftVPXEncoder.cpp does not validate OMX buffer sizes. The issue resides in mediaserver’s handling of certain video/codec operations and enables local privilege escalation to Signature or SignatureOrSystem via a craft...

The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code

The vulnerability of the OMXNodeInstance::emptyBuffer function in the libstagefright library of the Android operating system arises due to buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted application...

Lax Security to Blame for NASDAQ Hack

The cyber attack on the NASDAQ OMX Group late last year was the result of shoddy security, according to a new report via Reuters. Computers running NASDAQ’s Director’s Desk, the software that was breached, had faulty firewalls, missing security patches and were running outdated software, like...

Anti-computer hacking bill coming in U.S. Congress !

Strengthening cybersecurity is the goal of legislation being introduced in the U.S. Congress after reports of hack attacks on computer networks at Nasdaq OMX Group NDAQ.O and at oil and gas companies. "Cyber-threats are not on the horizon, they are upon us," Democratic Senator Robert Menendez, wh...

NASDAQ Hack Raises Critical Infrastructure Concerns

NASDAQ OMX, owners and operators of the NASDAQ Stock Exchange, reported this weekend that their systems had been infiltrated by unknown hackers. According to a report in the New York Times, NASDAQ OMX contacted federal law enforcement officials after discovering suspicious files in a part of thei...