PT-2017-1080

Name of the Vulnerable Software and Affected Versions Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1 Description An information disclosure issue in the libopus Mediaserver could allow a local malicious application to access data outside of its permission levels. This could be used to access...

PT-2017-1040

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 7.0 Description A denial of service issue in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is related to the improper...

PT-2017-1039

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0 Description A denial of service issue in libmedia and libstagefright in Mediaserver could allow an attacker to use a specially crafted file to cause a device hang or reboot. This issue is...

CVE-2016-6767: Undefined Security Weakness

A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4. Android ID: A-31833604...

CVE-2017-0397: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in id3/ID3.cpp in libstagefright in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Androi...

CVE-2016-6773: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in the ih264d decoder in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions...

PT-2017-1074

Name of the Vulnerable Software and Affected Versions Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1 Description The issue is related to an elevation of privilege vulnerability in Mediaserver, which could enable a local malicious application to execute arbitrary code within the context of a...

CVE-2016-6764: Undefined Security Weakness

A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0. Android ID:...

Google Android Mediaserver Component Denial of Service Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A security vulnerability exists in the Google Android Mediaserver component that allows remote attackers to exploit the vulnerabilit...

PT-2017-1033

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.0 Description The issue is related to a lack of protection for service data in the ih264d decoder of the Android operating system's Mediaserver. This could allow a remote attacker to cause a denial of service or...

Google Android Mediaserver Information Disclosure Vulnerability (CNVD-2017-00232)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. An information disclosure vulnerability exists in Google Android Mediaserver. An attacker can exploit the vulnerability to obtain...

Google Android Mediaserver Information Disclosure Vulnerability (CNVD-2017-00233)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. An information disclosure vulnerability exists in Google Android Mediaserver. An attacker can exploit the vulnerability to obtain...

Google Nexus Mediaserver Denial of Service Vulnerability (CNVD-2017-00240)

Google Nexus is a series of smart devices based on the Android operating system, which includes a cell phone and a tablet. A denial of service vulnerability exists in Google Nexus Mediaserver. A remote attacker can exploit the vulnerability to cause the device to hang or reboot, denying service t...

Google Android Remote Code Execution Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in Google Android, which can be exploited by an attacker to execute arbitrary code in the context of the mediaserver process. A failed...

Google Patches 29 Critical Android Vulnerabilities Including Holes in Mediaserver, Qualcomm

Google has patched ten critical vulnerabilities tied to problem-plagued Android components like Mediaserver, NVIDIA’s GPU driver, and Qualcomm’s driver. The most serious bug, according to Google’s January Android Security Bulletin, is the Mediaserver vulnerability. “The most severe of these issue...

CVE-2016-6722

An information disclosure vulnerability in libstagefright in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a local malicious application to access data outside of its permission levels. This issue is...

CVE-2016-6722

An information disclosure vulnerability in libstagefright in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a local malicious application to access data outside of its permission levels. This issue is...

CVE-2016-6720

An information disclosure vulnerability in libstagefright in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a local malicious application to access data outside of its permission levels. This issue is...

CVE-2016-6720

An information disclosure vulnerability in libstagefright in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a local malicious application to access data outside of its permission levels. This issue is...

DEBIAN-CVE-2016-6712

A remote denial of service vulnerability in libvpx in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-01 could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the...