The vulnerability of the Android operating system allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability in the file codecs/on2/h264dec/source/h264bsddpb.c of the libstagefright library in the Android operating system’s media server is caused by a numerical overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure memory...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability in the omx/OMXNodeInstance.cpp method of the libstagefright library in the Android operating system’s media server is related to the lack of port checking for buffers. Exploiting this vulnerability can allow a local attacker to increase their privileges through a specially creat...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Android operating system’s media server is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created application...

The vulnerability of the Android operating system, which allows a hacker to trigger a service failure

The vulnerability of the codecs/aacdec/SoftAAC2.cpp method in the libstagefright library of the Android operating system’s media server exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruption...

The vulnerability of the Android operating system, which allows a hacker to trigger a service failure

The vulnerability of the decoder/ih264dapi.c file in the Android operating system’s media server is related to improper handling of invalid PPS and SPS blocks. Exploiting this vulnerability allows a malicious actor to cause service interruptions device freezing and reboots by using a specially...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the mm-video-v4l2/vidc/venc/src/omxvideobase.cpp file in the Android operating system’s media server is related to the improper allocation of memory. Exploiting this vulnerability could allow a local attacker to increase their privileges through a specially created applicatio...

The vulnerability of the Android operating system, which allows a hacker to trigger a service failure

The vulnerability of the ih264d decoder in the Android operating system’s media server stems from certain parts of the structure not being initialized properly. Exploiting this vulnerability allows a malicious actor to cause service failure device freezing and reboots by using a specially crafted...

CVE-2016-3821

libmedia in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 has certain incorrect declarations, which allows remote attackers to execute arbitrary code or cause a denial of service NULL pointer dereference or memory corruption via a craft...

CVE-2016-3819

Integer overflow in codecs/on2/h264dec/source/h264bsddpb.c in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted...

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the Android operating system’s media server is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information...

The vulnerability of the Android operating system, which allows a hacker to trigger a service failure

The vulnerability of the decoder/ih264dparsepslice.c file in the Android operating system’s media server is related to frame processing errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions device freezing and reboots by using a...

The vulnerability of the Android operating system, which allows a hacker to trigger a service failure

The vulnerability of the Android operating system’s media server relates to the lack of restrictions on memory usage by the process. Exploiting this vulnerability allows a malicious actor to cause service interruptions device freezing and reboots by using a specially crafted media file...

The vulnerability of the Android operating system, which allows a hacker to trigger a service failure

The vulnerability of the Tremolo/res012.c file in the Android operating system’s media server is related to the lack of checks on partition numbers. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures device freezing and reboots by using a...

The vulnerability of the Android operating system allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the decoder/ih264dapi.c file in the Android operating system’s media server is related to initialization errors in the data structures. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure memory corruption by using a...

The vulnerability of the Android operating system, which allows a hacker to trigger a service failure

The vulnerability of the MPEG4Extractor.cpp file in the libstagefright component of the Android operating system’s media server is related to the absence of a memory allocation check. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure device freezi...

CVE-2016-3764

media/libmediaplayerservice/MetadataRetrieverClient.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to obtain sensitive pointer information via a crafted application, aka internal bug 28377502...

CVE-2016-3754

mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not limit process-memory usage, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 28615448...

CVE-2016-2508

media/libmediaplayerservice/nuplayer/GenericSource.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 does not validate certain track data, which allows remote attackers to execute arbitrary code or cause a denial of service memory...

UBUNTU-CVE-2016-3745

Multiple buffer overflows in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attackers to gain privileges via a crafted application that provides an AudioEffect reply, as demonstrated by obtaining Signature or SignatureOrSystem...

UBUNTU-CVE-2016-2507

Integer overflow in codecs/on2/h264dec/source/h264bsdstorage.c in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a...