PT-2017-10627

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.2 Description A denial of service issue exists in the Android media framework, specifically in libavc. Recommendations For Android versions 6.0 through 7.1.2, update to a version that contains a fix for this...

PT-2017-10623

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 Description A elevation of privilege vulnerability exists in the Android media framework, specifically in the mpeg4 encoder. Recommendations For versions 4.4.4, 5.0.2, 5.1.1,...

PT-2017-10618

Name of the Vulnerable Software and Affected Versions Android versions 7.0, 7.1.1, 7.1.2 Description A denial of service issue exists in the Android media framework, specifically in libskia. Recommendations For Android versions 7.0, 7.1.1, and 7.1.2, at the moment, there is no information about a...

PT-2017-10629

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 Description A information disclosure vulnerability exists in the Android media framework, specifically in the audioserver component. Recommendations For Android versions 4.4.4...

CVE-2017-0745: Improper Initialization

A remote code execution vulnerability in the Android media framework avc decoder. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37079296...

CVE-2017-0734: Undefined Security Weakness

A denial of service vulnerability in the Android media framework libavc. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-38014992...

CVE-2017-0722: Undefined Security Weakness

A remote code execution vulnerability in the Android media framework h263 decoder. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37660827...

CVE-2017-0739: Exposure of Sensitive Information to an Unauthorized Actor

A information disclosure vulnerability in the Android media framework libhevc. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37712181...

PT-2017-10621

Name of the Vulnerable Software and Affected Versions Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 Description A elevation of privilege issue exists in the Android media framework, specifically in the mediadrmserver component. This issue may allow for unauthorized access to...

PT-2017-10626

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.2 Description A denial of service issue exists in the Android media framework, specifically in libavc. Recommendations For Android versions 6.0 through 7.1.2, update to a version that contains a fix for this...

CVE-2017-0732: Undefined Security Weakness

A elevation of privilege vulnerability in the Android media framework libstagefright. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37504237...

CVE-2017-0721: Improper Input Validation

A remote code execution vulnerability in the Android media framework libmpeg2. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37561455...

CVE-2017-0714: Undefined Security Weakness

A remote code execution vulnerability in the Android media framework h263 decoder. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36492637...

PT-2017-10620

Name of the Vulnerable Software and Affected Versions Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 Description A denial of service issue exists in the Android media framework, specifically in the hevc decoder. This issue may allow for a denial of service attack. Recommendations Fo...

PT-2017-10617

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.2 Description A denial of service issue exists in the Android media framework, specifically in the libmpeg2 component. This issue does not mention any estimated number of potentially affected devices or...

Google Patches 10 Critical Bugs in August Android Security Bulletin

Google patched 10 critical remote code execution bugs in its August Android Security Bulletin issued Monday. It warned the most severe RCE vulnerabilities could enable a remote attacker, using a specially crafted file, to execute arbitrary code within the context of a privileged process. The...

RHEL 7 : GStreamer (RHSA-2017:2060)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2060 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The following packages have been upgraded t...

PT-2017-3579

Name of the Vulnerable Software and Affected Versions: Android versions 7.0, 7.1.1, 7.1.2, 8.0, 8.1 Description: The issue is related to an information disclosure vulnerability in the Android media framework, specifically in the libhevc library. It is associated with insufficient state checking,...

Moderate: Red Hat Security Advisory: GStreamer security, bug fix, and enhancement update

An update is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links ...

CVE-2017-0722

A remote code execution vulnerability in the Android media framework h263 decoder. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37660827...