CVE-2017-13185

CVE-2017-13185 is an information-disclosure vulnerability in Android’s media framework libhevc. Affected products/versions per sources: Android 7.0, 7.1.1, 7.1.2, and 8.0. The root cause is information exposure via the libhevc decoder in the Media framework (details are consistent across NVD/CNVD...

CVE-2017-13185

An information disclosure vulnerability in the Android media framework libhevc. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-65123471...

CVE-2017-13177

In several functions of libhevc, NEON registers are not preserved. This could lead to remote code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8....

CVE-2017-13185: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in the Android media framework libhevc. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-65123471...

CVE-2017-13190: Allocation of Resources Without Limits or Throttling

A vulnerability in the Android media framework libhevc related to handling pscodecobj memory allocation failures. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-68299873...

CVE-2017-13187: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in the Android media framework libhevc. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65034175...

CVE-2017-13177: Improper Restriction of Operations within the Bounds of a Memory Buffer

In several functions of libhevc, NEON registers are not preserved. This could lead to remote code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8....

CVE-2017-13177

In several functions of libhevc, NEON registers are not preserved. This could lead to remote code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8....

CVE-2017-0878

A remote code execution vulnerability in the Android media framework libhevc. Product: Android. Versions: 8.0. Android ID A-65186291...

CVE-2017-0878

A remote code execution vulnerability in the Android media framework libhevc. Product: Android. Versions: 8.0. Android ID A-65186291...

CVE-2017-0878

CVE-2017-0878 is a remote code execution vulnerability in Android's Media Framework (libhevc) affecting Android 8.0. The issue enables code execution in the context of a privileged process when a device processes a specially crafted media file. Public sources in the connected documents confirm th...

CVE-2017-0878

A remote code execution vulnerability in the Android media framework libhevc. Product: Android. Versions: 8.0. Android ID A-65186291...

CVE-2017-0878: Improper Input Validation

A remote code execution vulnerability in the Android media framework libhevc. Product: Android. Versions: 8.0. Android ID A-65186291...

Google Android Media framework (libhevc) remote code execution vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, and Media framework libhevc is a hevc decoding library for multimedia development. A remote code execution vulnerability exists in Media frameworklibhevc in Android 8.0. A remote...

Android Media framework libhevc Information Disclosure Vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, with the Media framework libhevc as a decoding library for multimedia development. libhevc is one of the hevc decoding...

Android Media framework libhevc denial of service vulnerability (CNVD-2017-34652)

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA, with the Media framework libhevc as a decoding library for multimedia development. libhevc is one of the hevc decoding...

CVE-2017-0851

An information disclosure vulnerability in the Android media framework libhevc. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-35430570...

CVE-2017-0852

A denial of service vulnerability in the Android media framework libhevc. Product: Android. Versions: 5.0.2, 5.1.1, 6.0. Android ID: A-62815506...

CVE-2017-0851

An information disclosure vulnerability in the Android media framework libhevc. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-35430570...

Remote code execution

A remote code execution vulnerability in the Android media framework libhevc. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64893226...