CVE-2019-2107

In ihevcdparsepps of ihevcdparseheaders.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0...

Exploit for Out-of-bounds Write in Google Android

CVE-2019-2107 CVE-2019-2107 CVE-2019-2107 - looks scary. Stil...

Android 7 < 9 - Remote Code Execution

Exploit Title: Android 7-9 - Remote Code Execution Date: date Exploit Author: Marcin Kozlowski Version: 7-9 Tested on: Android CVE : 2019-2107 CVE-2019-2107 - looks scary. Still remember Stagefright and PNG bugs vulns .... With CVE-2019-2107 the decoder/codec runs under mediacodec user and with...

Android 7 - 9 VideoPlayer - 'ihevcd_parse_pps' Out-of-Bounds Write

CVE-2019-2107 - looks scary. Still remember Stagefright and PNG bugs vulns .... With CVE-2019-2107 the decoder/codec runs under mediacodec user and with properly "crafted" video with tiles enabled - pspps-i1tilesenabledflag you can possibly do RCE. The codec affected is HVEC a.k.a H.265 and MPEG-...

CVE-2019-2107

creationtimestamp| type| source ---|---|--- 2019-07-08 21:00:10+00:00| seen| https://t.me/cveNotify/308 2019-07-17 09:44:45+00:00| published-proof-of-concept| https://t.me/antichat/5899 2019-07-23 15:50:17+00:00| published-proof-of-concept| https://t.me/androidMalware/234 2019-07-24 12:01:40+00:0...

CVE-2019-2107

CVE-2019-2107 affects the Android media framework. The issue is an out-of-bounds write in ihevcd_parse_pps (ihevcd_parse_headers.c) that can lead to remote code execution with no additional privileges, requiring user interaction to exploit. Affected Android versions include 7.0 through 9. Public ...