Google Android Information Disclosure Vulnerability (CNVD-2016-06134)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A security vulnerability exists in Mediaserver in Android, which can be exploited by a remote attacker to build a special application and induce the application to parse and access...

CVE-2016-3764

media/libmediaplayerservice/MetadataRetrieverClient.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to obtain sensitive pointer information via a crafted application, aka internal bug 28377502...

Code injection

The mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSyste...

UBUNTU-CVE-2016-2479

The mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSyste...

UBUNTU-CVE-2016-2481

The mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSyste...

Android Mediaserver Privilege Mobilization Vulnerability (CNVD-2016-03924)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. An elevation vulnerability exists in Android's Mediaserver, which can be exploited by a local attacker to execute arbitrary code wit...

CVE-2016-2451

codecs/on2/dec/SoftVPX.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not validate VPX output buffer sizes, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining...

UBUNTU-CVE-2016-0840

Multiple stack-based buffer underflows in decoder/ih264dparsecavlc.c in mediaserver in Android 6.x before 2016-04-01 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 26399350...

Google Nexus Mediaserver Denial of Service Vulnerability (CNVD-2016-01544)

Google Nexus is a series of smart devices based on the Android operating system developed by the U.S. company Google Google, including cell phones and tablet computers. The smart device by Google to provide technology and authorize the cooperation of hardware manufacturers for production and...

Android mediaserver remote code execution vulnerability (CNVD-2016-00129)

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in the implementation of the mediaserver feature in version 5.x prior to Android 5.1.1 LMY49F, and version 6.0 prior to 2016-01-01. A remote attacker could exploit this vulnerability to execut...

Nexus Security Bulletin—January 2016Stay organized with collectionsSave and categorize content based on your preferences.

We have released a security update to Nexus devices through an over-the-air OTA update as part of our Android Security Bulletin Monthly Release process. The Nexus firmware images have also been released to the Google Developer site. Builds LMY49F or later and Android 6.0 with Security Patch Level...

Android mediaserver memory corruption vulnerability (CNVD-2015-08006)

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in mediaserver in Android versions prior to 5.1.1 LMY48Z, 6.0 2015-12-01 and prior to 6.0 2015-12-01, which can be exploited by remote attackers to execute arbitrary code or cause a denial of...

Android mediaserver memory corruption vulnerability (CNVD-2015-08005)

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in mediaserver in Android version 6.0, which can be exploited by remote attackers to execute arbitrary code or cause a denial of service memory corruption via a constructed media file...

Android mediaserver remote code execution vulnerability

mediaserver is a very important process in android, audio, video, camera are all related to mediaserver process. A remote code execution vulnerability exists in Android 4.4-5.1.1 and Android 6.0 versions of mediaserver. A remote attacker can exploit this vulnerability to execute arbitrary code or...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Android operating system’s mediaserver component is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially crafted application...

The vulnerability of the Android operating system, which allows a hacker to trigger a service failure

The vulnerability of the Android operating system’s mediaserver component is related to errors in the code. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...