Google Android Media framework (libhevc) Denial of Service Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, with the Media framework libhevc as a decoding library for multimedia development. libhevc is one of the hevc decoding...

Google Android Media framework (libhevc) information disclosure vulnerability (CNVD-2018-08603)

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, with the Media framework libhevc as a decoding library for multimedia development. libhevc is one of the hevc decoding...

CVE-2017-13300

A denial of service vulnerability in the Android media framework libhevc. Product: Android. Versions: 6.0, 6.0.1. Android ID: A-71567394...

CVE-2017-13297

A information disclosure vulnerability in the Android media framework libhevc. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71766721...

CVE-2017-13297

A information disclosure vulnerability in the Android media framework libhevc. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71766721...

Denial of service

A denial of service vulnerability in the Android media framework libhevc. Product: Android. Versions: 6.0, 6.0.1. Android ID: A-71567394...

Information disclosure

A information disclosure vulnerability in the Android media framework libhevc. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-71766721...

CVE-2017-13297

CVE-2017-13297 is an information-disclosure vulnerability in Android’s media framework library libhevc. The Android Security Bulletin (Pixel/Nexus, April 2018) lists CVE-2017-13297 under Media framework with Type: ID (information disclosure), Severity: Moderate for updated AOSP versions 7.0, 7.1....

CVE-2017-13300

CVE-2017-13300 is a DoS in Android's media framework (libhevc) affecting Android 6.0 and 6.0.1. The cited sources (NVD entry and Pixel bulletin) confirm a DoS in the libhevc decoder component; the Android 6.x devices (Pixel/Nexus) are specifically listed. The Pixel security bulletin assigns this ...

CVE-2017-13300

A denial of service vulnerability in the Android media framework libhevc. Product: Android. Versions: 6.0, 6.0.1. Android ID: A-71567394...

The vulnerability of the Android operating system’s libhevc library, allowing a hacker to execute arbitrary code

The vulnerability of the Android operating system’s libhevc library arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process remotely...

CVE-2017-13233

In ihevcdctbboundarystrengthpbslice of libhevc, there is possible resource exhaustion. This could lead to a remote temporary denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1,...

Code injection

In ihevcdctbboundarystrengthpbslice of libhevc, there is possible resource exhaustion. This could lead to a remote temporary denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1,...

CVE-2017-13233

CVE-2017-13233 affects the Android-era libhevc decoder: the function ihevcd_ctb_boundary_strength_pbslice can exhaust resources, causing a remote temporary denial of service. Exploitation requires user interaction and can impact affected Android versions (5.1.1–8.1). The issue is tied to libhevc’...

The vulnerability of the libhevc library in the Media Framework of the Android operating system allows a hacker to induce a service failure.

The vulnerability of the libhevc library in the Media Framework of the Android operating system is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the libhevc library in the Media Framework of the Android operating system allows a hacker to execute arbitrary code.

The vulnerability of the libhevc library in the Media Framework of the Android operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of a privileged process using a specially crafted file...

Google Android ihevcd_ctb_boundary_strength_pbslice Absolute Service Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. libhevc is one of the hevc decoding libraries. A denial of service vulnerability exists in ihevcdctbboundarystrengthpbslice of libhevc in Android. A remote attacker can exploit thi...

Unspecified vulnerability in Google Android Media framework (libhevc)

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, with the Media framework libhevc as a decoding library for multimedia development. libhevc is one of the hevc decoding...

Google Android Media framework (libhevc) Information Disclosure Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, with the Media framework libhevc as a decoding library for multimedia development. libhevc is one of the hevc decoding...

CVE-2017-13177

In several functions of libhevc, NEON registers are not preserved. This could lead to remote code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8....