CVE-2019-2107

CVE-2019-2107 CVE-2019-2107 CVE-2019-2107 - 看起来很吓人。还记得 Stagefright 和 PNG 漏洞吗？通过 CVE-2019-2107，解码器/编解码器在 mediacodec 用户下运行，利用精心构造的视频（启用了图块 - pspps-i1tilesenabledflag）可能实现 RCE。受影响的编解码器是 HVEC（也称为 H.265 和 MPEG-H Part 2） exploit rce android stagefright cve 更多信息 LineageOS 安卓: root@kitploit: 02-11...

CVE-2019-2107

CVE-2019-2107 CVE-2019-2107 CVE-2019-2107 - 見た目は怖い。StagefrightやPNGのバグ脆弱性をまだ覚えていますか.... CVE-2019-2107では、デコーダ/コーデックがmediacodecユーザーで動作し、適切に「細工された」動画（タイル有効 - pspps-i1tilesenabledflag）により、RCEが可能になる可能性があります。影響を受けるコーデックはHVEC（別名H.265およびMPEG-H Part 2）です。exploit rce android stagefright cve 詳細情報 LineageOS...

A 0-click exploit chain for the Pixel 9 Part 2: Cracking the Sandbox with a Big Wave

Posted by Seth Jenkins With the advent of a potential Dolby Unified Decoder RCE exploit, it seemed prudent to see what kind of Linux kernel drivers might be accessible from the resulting userland context, the mediacodec context. As per the AOSP documentation, the mediacodec SELinux context is...

CVE-2021-0482

In BinderDiedCallback of MediaCodec.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

EUVD-2021-3101

Malicious code in bioql PyPI...

EUVD-2023-25101

Malicious code in bioql PyPI...

EUVD-2023-25168

Malicious code in bioql PyPI...

CVE-2025-26455

In multiple functions of NdkMediaCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-20933

In several functions of MediaCodec.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-...

CVE-2023-21000

In MediaCodec.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-194783918...

CVE-2023-21000

In MediaCodec.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-194783918...

CVE-2023-21000

In MediaCodec.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-194783918...

Google Android elevation of privilege vulnerability (CNVD-2024-21191)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability caused by a privilege bypass in several functions of MediaCodec.cpp. An attacker can exploit this vulnerability to gain elevated privileges...

PUB-A-194783918

In MediaCodec.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Google Android 资源管理错误漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability caused by a privilege bypass in several functions of MediaCodec.cpp. An attacker can exploit this vulnerability to gain elevated privileges...

CVE-2023-20933

In several functions of MediaCodec.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-...

CVE-2023-20933

CVE-2023-20933 affects Google Android: a use-after-free in several MediaCodec.cpp functions can lead to memory corruption and local elevation of privilege without extra exploitation steps. Affected are Android 10–13 (including 12L/12). The issue is described as a memory corruption vulnerability i...

The vulnerability of the BinderDiedCallback component in MediaCodec.cpp of the Android operating system, which allows attackers to exploit their privileges.

The vulnerability of the BinderDiedCallback MediaCodec.cpp component in the Android operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2021-0482

In BinderDiedCallback of MediaCodec.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...

CVE-2021-0482

In BinderDiedCallback of MediaCodec.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID:...