UBUNTU-CVE-2016-3827

codecs/hevcdec/SoftHEVC.cpp in libstagefright in mediaserver in Android 6.0.1 before 2016-08-01 mishandles decoder errors, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 28816956...

UBUNTU-CVE-2016-3830

codecs/aacdec/SoftAAC2.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows remote attackers to cause a denial of service device hang or reboot via crafted ADTS data, aka internal bug 29153599...

UBUNTU-CVE-2016-3820

The ih264d decoder in mediaserver in Android 6.x before 2016-08-01 mishandles slice numbers, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 28673410...

UBUNTU-CVE-2016-3821

libmedia in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 has certain incorrect declarations, which allows remote attackers to execute arbitrary code or cause a denial of service NULL pointer dereference or memory corruption via a craft...

UBUNTU-CVE-2016-3828

decoder/ih264dapi.c in mediaserver in Android 6.x before 2016-08-01 mishandles invalid PPS and SPS NAL units, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 28835995...

UBUNTU-CVE-2016-3823

The secure-session feature in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 mishandles heap pointers, which allows attackers to gain privileges via a crafted application, aka internal bug 28815329...

CVE-2016-3826

The CVE-2016-3826 advisory affects Android’s Mediaserver component, specifically the AudioFlinger path (services/audioflinger/Effects.cpp). The root cause is that the reply size for an AudioFlinger effect command is not validated, enabling a crafted application to escalate privileges within the d...

CVE-2016-3827

CVE-2016-3827 affects Android 6.0.1 Mediaserver (libstagefright: codecs/hevcdec/SoftHEVC.cpp). The root cause is mishandling decoder errors, enabling a denial of service (device hang or reboot) via a crafted media file. Affected的是MediaServer/Mediaserver component; no explicit exploit details are ...

CVE-2016-3823

CVE-2016-3823 affects the Mediaserver in Android’s mediaserver, specifically the secure-session feature in the mm-video-v4l2 venc component. The issue arises from mishandling heap pointers, enabling a crafted application to gain privileges. Affected products/versions include Android 4.x before 4....

CVE-2016-3825

CVE-2016-3825 affects Android Mediaserver (mm-video-v4l2/vidc/venc/src/omx_video_base.cpp) where a faulty memory allocation in mediaserver could allow a privilege escalation via a crafted app. Affected are Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01. The issue is des...

CVE-2016-3835

Summary (CVE-2016-3835) : A vulnerability in the Mediaserver component (mm-video-v4l2 venc) of Android’s mediaserver on 4.x to 6.x releases allows an attacker via a crafted application to read sensitive information by mishandling heap pointers. Affects Android versions listed in the description (...

CVE-2016-3820

The CVE-2016-3820 issue affects the ih264d decoder in Mediaserver (Android 6.x). The root cause is the decoder mishandling slice numbers, enabling a remote attacker to craft a media file that could trigger arbitrary code execution or memory corruption within Mediaserver. Public details confirm im...

CVE-2016-3824

omx/OMXNodeInstance.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 does not validate the buffer port, which allows attackers to gain privileges via a crafted application, aka internal bug 28816827...

CVE-2016-3821

CVE-2016-3821 affects libmedia in mediaserver (Android Mediaserver). Affected Android versions include 4.x before 4.4.4, 5.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01; the issue arises from certain incorrect declarations that allow remote code execution or a denial of service (N...

CVE-2016-3830

CVE-2016-3830 affects Android Mediaserver’s Mediaserver component, specifically codecs/aacdec/SoftAAC2.cpp in libstagefright. The underlying flaw allows a crafted ADTS data packet to trigger a denial of service, causing device hang or reboot. Affected Android branch versions are 4.x before 4.4.4,...

CVE-2016-3819

CVE-2016-3819 involves an integer overflow in codecs/on2/h264dec/source/h264bsd_dpb.c within libstagefright/Mediaserver on Android. A crafted media file can trigger memory corruption, enabling remote code execution or a denial of service. Affected Android lineages include 4.x before 4.4.4, 5.0.x ...

CVE-2016-3824

CVE-2016-3824 covers a Mediaserver elevation of privilege flaw in Android’s mediaserver (libstagefright), where OMXNodeInstance.cpp in OMX buffer port handling is unvalidated. A crafted application could exploit this local issue to gain privileges. Affected are Android 4.x before 4.4.4, 5.0.x bef...

CVE-2016-3828

CVE-2016-3828 affects Android Mediaserver (decoder/ih264d_api.c) in Android 6.x prior to the 2016-08-01 patch, where invalid PPS/SPS NAL units are mishandled, enabling a crafted media file to cause a denial of service (device hang or reboot). The issue is categorized as a Mediaserver DoS vulnerab...

CVE-2016-3844

CVE-2016-3844 is a Mediaserver elevation-of-privilege issue in Android. The provided documents consistently describe it as a local privilege escalation affecting Mediaserver on Nexus 9 and Pixel C devices, exploitable by a crafted application to gain privileges. Root cause is tied to Mediaserver ...

CVE-2016-3828

decoder/ih264dapi.c in mediaserver in Android 6.x before 2016-08-01 mishandles invalid PPS and SPS NAL units, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 28835995...