1331 matches found
PT-2015-2204
Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48M Description The issue is caused by an integer underflow in the MPEG4Extractor::parseChunk function in the libstagefright library of the Android operating system. This allows a remote attacker to execute...
PT-2015-2217
Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48I libstagefright affected versions not specified Description The issue is caused by multiple integer overflows in the BnHDCP::onTransact function of the libstagefright library in the Android operating syste...
PT-2015-2216
Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48I Description The issue is caused by a buffer overflow in the OMXNodeInstance::emptyBuffer function in libstagefright. This allows attackers to execute arbitrary code via a crafted application...
PT-2015-3049
Name of the Vulnerable Software and Affected Versions Android versions prior to 5.0.0 Description The issue is caused by an integer overflow in the SampleTable.cpp file of the libstagefright component in the Android operating system. This can be exploited by a remote attacker to compromise the...
PT-2015-3048
Name of the Vulnerable Software and Affected Versions Android versions prior to 5.0.0 Description The issue is caused by an integer overflow in the SampleTable.cpp file of the libstagefright component in the Android operating system. This can be exploited by a remote attacker to compromise the...
PT-2015-3050
Name of the Vulnerable Software and Affected Versions Android versions prior to 5.0.0 Description The issue is caused by an integer overflow in the SampleTable.cpp file of the libstagefright component. This can potentially allow a remote attacker to compromise the confidentiality, integrity, and...
PT-2015-2206
Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48M Description The issue is related to multiple integer overflows in the addVorbisCodecInfo function in matroska/MatroskaExtractor.cpp in libstagefright in mediaserver. This allows remote attackers to cause ...
CVE-2015-3834
Multiple integer overflows in the BnHDCP::onTransact function in media/libmedia/IHDCP.cpp in libstagefright in Android before 5.1.1 LMY48I allow attackers to execute arbitrary code via a crafted application that uses HDCP encryption, leading to a heap-based buffer overflow, aka internal bug...
CVE-2015-6575
SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly consider integer promotion, which allows remote attackers to execute arbitrary code or cause a denial of service integer overflow and memory corruption via crafted atoms in MP4 data, aka internal bug 20139950, a...
CVE-2015-3861
Multiple integer overflows in the addVorbisCodecInfo function in matroska/MatroskaExtractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allow remote attackers to cause a denial of service device inoperability via crafted Matroska data, aka internal bug 21296336...
CVE-2014-7917
Integer overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified impact and attack vectors, aka internal bug 15342615...
CVE-2014-7916
Integer overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified impact and attack vectors, aka internal bug 15342751...
CVE-2014-7915
Integer overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified impact and attack vectors, aka internal bug 15328708...
CVE-2015-3864
Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted MPEG-4 data, aka internal bug 23034759. NOTE: this vulnerability exists because of an...
CVE-2015-3826
The MPEG4Extractor::parse3GPPMetaData function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not enforce a minimum size for UTF-16 strings containing a Byte Order Mark BOM, which allows remote attackers to cause a denial of service integer underflow, buffer over-read...
CVE-2015-3834
Technical details about CVE-2015-3834 are not publicly available in the provided connected documents. The initial entry describes the vulnerability but lacks corroborating specifics in the connected sources. Monitor for updates and new disclosures.
CVE-2015-3828
The MPEG4Extractor::parse3GPPMetaData function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not enforce a minimum size for UTF-16 strings containing a Byte Order Mark BOM, which allows remote attackers to execute arbitrary code or cause a denial of service integer...
CVE-2015-6598
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 23306638...
CVE-2015-3829
Off-by-one error in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code or cause a denial of service integer overflow and memory corruption via crafted MPEG-4 covr atoms with a size equal ...