CVE-2016-6760

CVE-2016-6760: Elevation of privilege in Qualcomm Media Codecs affecting Android. A local malicious app could execute arbitrary code in a privileged process via the Qualcomm Media Codecs component. Affected products/versions include Android devices with Kernel 3.10 and 3.18. The issue is categori...

CVE-2016-6761

CVE-2016-6761 describes an elevation of privilege vulnerability in Qualcomm media codecs on Android. A local malicious app could execute arbitrary code within the context of a privileged process due to this flaw in the media codecs. Affected devices include Nexus 5X/6/6P, Nexus 9, Android One, Ne...

CVE-2016-6761

An elevation of privilege vulnerability in Qualcomm media codecs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not...

CVE-2016-6759

CVE-2016-6759 is an elevation of privilege vulnerability in Qualcomm Media Codecs on Android. It could allow a local malicious app to execute arbitrary code within the context of a privileged process. Affected components/conditions: Android devices using Kernel-3.10 or Kernel-3.18 with Qualcomm M...

CVE-2016-6759

An elevation of privilege vulnerability in Qualcomm media codecs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not...

CVE-2016-6758

CVE-2016-6758 is an elevation of privilege vulnerability in Qualcomm Media Codecs on Android. The issue allows a local malicious application to execute arbitrary code in the context of a privileged process via exploitation of the Qualcomm media codecs component (kernel 3.10/3.18 lineage). Affecte...

Google Nexus Qualcomm Media Codecs elevation of privilege vulnerability (CNVD-2016-12167)

Android on Google Pixel XL, etc. is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA for use on Google Pixel XL smart device, etc. Qualcomm Media Codecs is one of the Qualcomm Qualcomm Media Codecs is one of Qualcomm's multimedia codec components. ...

Google Nexus Qualcomm Media Codecs Elevation of Privilege Vulnerability

Android on Google Pixel XL, etc. is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA for use on Google Pixel XL smart devices, etc. Qualcomm Media Codecs is one of the Qualcomm Qualcomm Media Codecs is one of Qualcomm's multimedia codec components...

Google Nexus Qualcomm Media Codecs elevation of privilege vulnerability (CNVD-2016-12168)

Android on Google Pixel XL, etc. is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA for use on Google Pixel XL smart device, etc. Qualcomm Media Codecs is one of the Qualcomm Qualcomm Media Codecs is one of Qualcomm's multimedia codec components. ...

Google Nexus Qualcomm Media Codecs elevation of privilege vulnerability (CNVD-2016-12169)

Android on Google Pixel XL, etc. is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA for use on Google Pixel XL smart device, etc. Qualcomm Media Codecs is one of the Qualcomm Qualcomm Media Codecs is one of Qualcomm's multimedia codec components. ...

Buffer overflow

Multiple buffer overflows in codecs/mp3dec/SoftMP3.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 allow attackers to gain privileges via a crafted application, aka internal bug 29422022...

Buffer overflow

Buffer overflow in codecs/on2/dec/SoftVPX.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 allows attackers to gain privileges via a crafted application, aka internal bug 29421675...

CVE-2016-3827

codecs/hevcdec/SoftHEVC.cpp in libstagefright in mediaserver in Android 6.0.1 before 2016-08-01 mishandles decoder errors, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 28816956...

CVE-2016-3830

codecs/aacdec/SoftAAC2.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows remote attackers to cause a denial of service device hang or reboot via crafted ADTS data, aka internal bug 29153599...

openSUSE Security Update : vlc (openSUSE-2016-754)

This update for vlc to 2.2.4 to fix the following security issue : - CVE-2016-5108: Fix out-of-bound write in adpcm QT IMA codec boo984382. This also include an update of codecs and libraries to fix these 3rd party security issues : - CVE-2016-1514: Matroska libebml EbmlUnicodeString Heap...

Security update for vlc (important)

This update for vlc to 2.2.4 to fix the following security issue: - CVE-2016-5108: Fix out-of-bound write in adpcm QT IMA codec boo984382. This also include an update of codecs and libraries to fix these 3rd party security issues: - CVE-2016-1514: Matroska libebml EbmlUnicodeString Heap Informati...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the codecs/on2/enc/SoftVPXEncoder.cpp function in the libstagefright component of the mediaserver in the Android operating system is related to the lack of checks for the size of the OMX buffer. Exploiting this vulnerability can allow a malicious actor to enhance their...

CVE-2016-2451

codecs/on2/dec/SoftVPX.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not validate VPX output buffer sizes, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining...

Debian DLA-83-1 : ffmpeg update

This update to ffmpeg disables support for over 100 codecs, decoders, and formats that are rarely used nowadays, for which the support available in squeeze is most likely insufficient, etc. This update is only meant to reduce the attack surface. ffmpeg is otherwise unsupported in squeeze-lts, and...

DEBIAN-CVE-2015-1558

Asterisk Open Source 12.x before 12.8.1 and 13.x before 13.1.1, when using the PJSIP channel driver, does not properly reclaim RTP ports, which allows remote authenticated users to cause a denial of service file descriptor consumption via an SDP offer containing only incompatible codecs...