CVE-2016-6706

CVE-2016-6706 is a local privilege-escalation vulnerability in Android’s Mediaserver, specifically within the libstagefright component. The issue allows a local malicious application to execute arbitrary code in the context of a privileged process due to a flaw in Mediaserver on Android 7.0 and e...

CVE-2016-6720

CVE-2016-6720 is an information-disclosure vulnerability in libstagefright within Mediaserver on Android. A local malicious application could access data outside its permissions by exploiting Mediaserver’s handling of media processing. Affected Android versions include 4.x before 4.4.4, 5.0.x bef...

CVE-2016-6722

CVE-2016-6722 describes an information-disclosure vulnerability in libstagefright within Mediaserver. A local attacker could exploit Mediaserver while processing media to access data outside the application’s permitted scope. Affected Android versions include 4.x before 4.4.4, 5.0.x before 5.0.2,...

CVE-2016-6722

An information disclosure vulnerability in libstagefright in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a local malicious application to access data outside of its permission levels. This issue is...

CVE-2016-6699

A remote code execution vulnerability in libstagefright in Mediaserver in Android 7.0 before 2016-11-01 could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code...

CVE-2016-6699

CVE-2016-6699 is a remote code execution in Mediaserver’s libstagefright on Android 7.0 (before 2016-11-01). The issue allows memory corruption during media file and data processing when a specially crafted file is processed. Impact is remote code execution within Mediaserver. The vulnerability i...

CVE-2016-6706

An elevation of privilege vulnerability in libstagefright in Mediaserver in Android 7.0 before 2016-11-01 could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to...

CVE-2016-6720

An information disclosure vulnerability in libstagefright in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a local malicious application to access data outside of its permission levels. This issue is...

PT-2016-7059

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-11-01 Description A remote code execution issue in libstagefright in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issu...

PT-2016-7080

Name of the Vulnerable Software and Affected Versions Android versions 4.x through 4.4.3 Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-11-01 Android versions 7.0 before 2016-11-01 Description An information disclosure issue in...

PT-2016-7082

Name of the Vulnerable Software and Affected Versions Android versions 4.x through 4.4.3 Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-11-01 Android versions 7.0 before 2016-11-01 Description An information disclosure issue in...

PT-2016-7066

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-11-01 Description An issue in libstagefright in Mediaserver could allow a local malicious application to execute arbitrary code within the context of a privileged process, potentially gaining local access to...

CVE-2016-6706: Undefined Security Weakness

An elevation of privilege vulnerability in libstagefright in Mediaserver in Android 7.0 before 2016-11-01 could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to...

CVE-2016-6720: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in libstagefright in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a local malicious application to access data outside of its permission levels. This issue is...

CVE-2016-6699: Improper Restriction of Operations within the Bounds of a Memory Buffer

A remote code execution vulnerability in libstagefright in Mediaserver in Android 7.0 before 2016-11-01 could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code...

CVE-2016-6722: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in libstagefright in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a local malicious application to access data outside of its permission levels. This issue is...

CVE-2016-6699

A remote code execution vulnerability in libstagefright in Mediaserver in Android 7.0 before 2016-11-01 could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code...

Android Mediaserver Denial of Service Vulnerability (CNVD-2016-09552)

Android is an open source operating system based on Linux. A security vulnerability in the id3/ID3.cpp file in libstagefright in Android's Mediaserver allows remote attackers to exploit the vulnerability to build malicious applications that can crash the application...

CVE-2016-3920

id3/ID3.cpp in libstagefright in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows remote attackers to cause a denial of service device hang or reboot via a crafted file, aka internal bug 30744884...

CVE-2016-3920

id3/ID3.cpp in libstagefright in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows remote attackers to cause a denial of service device hang or reboot via a crafted file, aka internal bug 30744884...