CVE-2017-13196

In several places in ihevcddecode.c, a dead loop could occur due to incomplete frames which could lead to memory leaks. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2017-13193

In ihevcddecode.c there is a possible infinite loop due to bytes for an sps of unsupported resolution resulting in the same sps being fed in over and over. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction i...

Design/Logic Flaw

In several places in ihevcddecode.c, a dead loop could occur due to incomplete frames which could lead to memory leaks. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation...

Design/Logic Flaw

In ihevcddecode.c there is a possible infinite loop due to bytes for an sps of unsupported resolution resulting in the same sps being fed in over and over. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction i...

CVE-2017-13196

In several places in ihevcddecode.c, a dead loop could occur due to incomplete frames which could lead to memory leaks. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2017-13193

In ihevcddecode.c there is a possible infinite loop due to bytes for an sps of unsupported resolution resulting in the same sps being fed in over and over. This could lead to a remote denial of service of a critical system process with no additional execution privileges needed. User interaction i...

CVE-2017-13193

CVE-2017-13193 affects Android via the Media/HEVC decoding path. The issue is an infinite loop in ihevcd_decode.c triggered by an sps with an unsupported resolution, causing the same SPS to be fed repeatedly. This can lead to a remote denial of service on a critical system process with no user in...

CVE-2017-13196

CVE-2017-13196 affects Android’s Media Framework, caused by a dead loop in ihevcd_decode.c when processing incomplete frames. This can lead to memory leaks and a remote denial of service of a critical system process, without user interaction. Affected Android versions include 5.1.1, 6.0, 6.0.1, 7...