Google Android Media framework elevation of privilege vulnerability (CNVD-2018-03093)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. Media framework is one of the frameworks used for multimedia development. A privilege elevation vulnerability exists in the 'OMXNodeInstance::useBuffer' and 'IOMX::freeBuffer'...

Security Bulletin: NVIDIA Shield TV and Tablet contain multiple vulnerabilities

Vulnerability Details The following sections summarize the vulnerabilities. Descriptions use CWE™ and risk assessments follow CVSS. CVE-2016-6790 NVIDIA OpenMax Component contains a vulnerability in LIBNVRM where an input buffer is copied to an output buffer without checking the size of the input...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Android operating system’s media server is related to the lack of checks for the size of OMX buffers. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the mm-video-v4l2 vidc component of the Android operating system’s media server is related to the lack of data structure validation for the OMX parameter. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created applicatio...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the libstagefright component in the Android operating system’s media server is related to the lack of checks on the size of OMX buffers for GSM and G711 decoders. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created...

CVE-2016-2480

The mm-video-v4l2 vidc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate certain OMX parameter data structures, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining...

UBUNTU-CVE-2016-2476

mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX buffer sizes, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug...