CVE-2018-9427

CVE-2018-9427 affects Android 8.0 and 8.1, tied to the Media framework. The issue is an out-of-bounds write in CopyToOMX of OMXNodeInstance.cpp caused by an incorrect bounds check, leading to remote code execution. Exploitation details in the provided sources indicate the impact is high (RCE) wit...

CVE-2018-9427

In CopyToOMX of OMXNodeInstance.cpp there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote arbitrary code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.0...

CVE-2018-9427: Out-of-bounds Write

In CopyToOMX of OMXNodeInstance.cpp there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote arbitrary code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-8.0...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability in the omx/OMXNodeInstance.cpp method of the libstagefright library in the Android operating system’s media server is related to the lack of port checking for buffers. Exploiting this vulnerability can allow a local attacker to increase their privileges through a specially creat...

CVE-2016-3824: Improper Restriction of Operations within the Bounds of a Memory Buffer

omx/OMXNodeInstance.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 does not validate the buffer port, which allows attackers to gain privileges via a crafted application, aka internal bug 28816827...