CVE-2017-0635: NULL Pointer Dereference

A remote denial of service vulnerability in HevcUtils.cpp in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as Low due to details specific to the vulnerability. Product: Android. Versions: 7.0, 7.1.1,...

CVE-2017-0603: Integer Overflow or Wraparound

A denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as Moderate because it requires an uncommon device configuration. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0,...

CVE-2017-0600: Undefined Security Weakness

A remote denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2,...

CVE-2017-0596: Undefined Security Weakness

An elevation of privilege vulnerability in libstagefright in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are n...

CVE-2017-0594: Buffer Copy without Checking Size of Input

An elevation of privilege vulnerability in codecs/aacenc/SoftAACEncoder2.cpp in libstagefright in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access ...

CVE-2017-0592: Improper Restriction of Operations within the Bounds of a Memory Buffer

A remote code execution vulnerability in FLACExtractor.cpp in libstagefright in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution...

PT-2017-2044

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 Description An elevation of privilege issue in the codecs/aacenc/SoftAACEncoder2.cpp function of the libstagefright service in the Mediaserver application could allow a local...

PT-2017-2042

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1 Description An elevation of privilege issue in libstagefright in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged...

PT-2017-2043

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1 Description An elevation of privilege issue in libstagefright in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged...

PT-2017-2046

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 Description A remote code execution issue in the FLACExtractor.cpp function within the libstagefright component of the Mediaserver in Android could allow an attacker to cause...

PT-2017-2049

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 Description The issue is related to insufficient access control in the libstagefright service of the Mediaserver application in the Android operating system. It allows a remot...

PT-2017-2071

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 Description A remote code execution issue in the Mediaserver process could allow an attacker to cause memory corruption during media file and data processing using a specially...

PT-2017-2176

Name of the Vulnerable Software and Affected Versions Android versions 7.0, 7.1.1, 7.1.2 Description A remote denial of service issue in HevcUtils.cpp in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is related ...

PT-2017-10571

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 Description A denial of service issue in libstagefright in Mediaserver could allow an attacker to cause a device hang or reboot using a specially crafted file. This issue...

CVE-2017-0595: Undefined Security Weakness

An elevation of privilege vulnerability in libstagefright in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are n...

CVE-2017-0592

A remote code execution vulnerability in FLACExtractor.cpp in libstagefright in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution...

PT-2017-2858

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.2 Description The issue is related to a remote code execution vulnerability in the Android media framework, specifically in the libstagefright library. This vulnerability is associated with inadequate access...

PT-2017-2861

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4 through 7.1.2 Description The issue is related to a remote code execution vulnerability in the Android media framework, specifically in the libstagefright library. This vulnerability is associated with inadequate access...

PT-2017-2882

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 Description The issue is related to a denial of service vulnerability in the Android media framework, specifically in the libstagefright library. It is associated with...

Google Android libstagefright Arbitrary Code Execution Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An arbitrary code execution vulnerability exists in Google Android libstagefright. An attacker could exploit this vulnerability to execute arbitrary code in an affected applicatio...