Media framework Heap Buffer Overflow DoS

The vulnerability of the readVector function in the iCrypto.cpp component of the Android Media framework arises from reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information that is protected by this functio...

Media framework Heap Buffer Overflow DoS

The vulnerability of the ihevcdparseseipayload function in the Media framework of the Android operating system is caused by a numerical overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

Google Patches Critical Vulnerabilities in Android OS

Google patched six critical remote code execution flaws in its Android operating system as part of its October Android Security Bulletin. Four of those remote code execution flaws are tied to Android’s Media framework and impact a wide range of Android devices including Google’s Pixel and Nexus...

Google Android Media Framework elevation of privilege vulnerability (CNVD-2018-22770)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Media Framework component of Google Android 7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9, which can be exploited by an attacke...

Google Android Media Framework Denial of Service Vulnerability (CNVD-2018-26252)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, of which Media Framework is a multimedia development framework. A denial of service vulnerability exists in Media Framework in Android. An attacker can exploit this vulnerability t...

PT-2018-1606

Name of the Vulnerable Software and Affected Versions Android versions 8.0 Description The issue is caused by an integer overflow in the ihevcd parse sei payload function of the ihevcd parse headers.c component in the Media framework of the Android operating system. This could lead to remote code...

PT-2018-1843

Name of the Vulnerable Software and Affected Versions: Android version 9 Description: The issue is related to a missing bounds check in the media server, which could lead to remote code execution with no additional execution privileges needed. User interaction is required for exploitation. The...

Google Android Media framework denial of service vulnerability (CNVD-2018-18774)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. Media framework is one of the frameworks used for multimedia development. A denial of service vulnerability exists in Media framework in Android versions 6.0 and 6.0.1. An attacker...

Google Android Media framework remote code execution vulnerability (CNVD-2018-18769)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. Media framework is one of the frameworks used for multimedia development. A remote code execution vulnerability exists in the Media framework in Android versions 8.0 and 8.1. A...

Google Android Media framework denial of service vulnerability (CNVD-2018-18770)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. Media framework is one of the frameworks used for multimedia development. A denial of service vulnerability exists in Media framework in Android. An attacker can exploit this...

UBUNTU-CVE-2018-1999015

FFmpeg before commit 5aba5b89d0b1d73164d3b81764828bb8b20ff32a contains an out of array read vulnerability in ASFF format demuxer that can result in heap memory reading. This attack appear to be exploitable via specially crafted ASF file that has to provided as input. This vulnerability appears to...

Google Android Media framework elevation of privilege vulnerability (CNVD-2018-16981)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. Media framework is one of the frameworks used for multimedia development. An elevation of privilege vulnerability exists in the Media framework in Android versions 8.0 and 8.1. An...

Google Android Media framework remote code execution vulnerability (CNVD-2018-16982)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. Media framework is one of the frameworks used for multimedia development. A remote code execution vulnerability exists in the Media framework in Android versions 8.0 and 8.1. A...

Google Android Media framework information disclosure vulnerability (CNVD-2018-16977)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. Media framework is one of the frameworks used for multimedia development. An information disclosure vulnerability exists in Media framework in Android. A remote attacker could...

Google Android Media framework denial of service vulnerability (CNVD-2018-16978)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. Media framework is one of the frameworks used for multimedia development. A denial of service vulnerability exists in Media framework in Android. A remote attacker could exploit th...

Google Android Media framework elevation of privilege vulnerability (CNVD-2018-16979)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. Media framework is one of the frameworks used for multimedia development. An elevation of privilege vulnerability exists in the Media framework in Android 8.1. An attacker can...

PT-2018-1844

Name of the Vulnerable Software and Affected Versions: Android versions 9 Description: The issue is related to a component of the Media framework in the Android operating system, specifically involving an out-of-bounds operation in memory. This could potentially allow a remote attacker to execute...

PT-2018-1618

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9.0 Description The issue is related to the impeg2 fmt conv yuv420p to yuv420sp uv av8 function in the Media framework component of the Android operating system. It involves an out-of-bounds write due to a missing...

PT-2018-1842

Name of the Vulnerable Software and Affected Versions: Android version 9 Description: The issue is related to the Media framework component of the Android operating system, where there is a buffer overflow due to incorrect bounds checks in numerous functions of libFDK. This could lead to remote...

Media Framework DoS

The vulnerability of the Media Framework component AACExtractor.cpp in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...