CVE-2016-2483

The mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSyste...

CVE-2016-2479

The mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSyste...

CVE-2016-2486

mp3dec/SoftMP3.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate the relationship between allocated memory and the frame size, which allows attackers to gain privileges via a crafted application, a...

CVE-2016-2478

mm-video-v4l2/vidc/vdec/src/omxvdecmsm8974.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles pointers, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or...

CVE-2016-2499

AudioSource.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not initialize certain data, which allows attackers to obtain sensitive information via a crafted application, aka internal bug 27855172...

CVE-2016-2464

libvpx in libwebm in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted mkv file, aka internal bug 23167726...

Android Mediaserver elevation of privilege vulnerability (CNVD-2016-03964)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. An elevation vulnerability exists in Android's Mediaserver, which can be exploited by a local attacker to execute arbitrary code wit...

Android Mediaserver Privilege Mobilization Vulnerability (CNVD-2016-03926)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. An elevation vulnerability exists in Android's Mediaserver, which can be exploited by a local attacker to execute arbitrary code wit...

Android Mediaserver elevation of privilege vulnerability (CNVD-2016-03921)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA in the U.S. Mediaserver is one of the multimedia service components. An elevation of privilege vulnerability exists in Android's Mediaserver. A local attacker can exploit this...

Android Mediaserver Privilege Mobilization Vulnerability (CNVD-2016-03925)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. An elevation vulnerability exists in Android's Mediaserver, which can be exploited by a local attacker to execute arbitrary code wit...

Android Mediaserver elevation of privilege vulnerability (CNVD-2016-03967)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA in the U.S. Mediaserver is one of the multimedia service components. An elevation vulnerability exists in Android's Mediaserver, which can be exploited by a local attacker to execut...

Android Mediaserver Privilege Mobilization Vulnerability (CNVD-2016-03923)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. An elevation vulnerability exists in Android's Mediaserver, which can be exploited by a local attacker to execute arbitrary code wit...

Android Mediaserver elevation of privilege vulnerability (CNVD-2016-03919)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. An elevation of privilege vulnerability exists in Android's Mediaserver. A local attacker can exploit this vulnerability to execute...

Android Mediaserver elevation of privilege vulnerability (CNVD-2016-03965)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. An elevation vulnerability exists in Android's Mediaserver, which can be exploited by a local attacker to execute arbitrary code wit...

Android Mediaserver elevation of privilege vulnerability (CNVD-2016-03963)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. An elevation vulnerability exists in Android's Mediaserver, which can be exploited by a local attacker to execute arbitrary code wit...

Android Mediaserver Privilege Mobilization Vulnerability (CNVD-2016-03924)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. An elevation vulnerability exists in Android's Mediaserver, which can be exploited by a local attacker to execute arbitrary code wit...

Android Mediaserver elevation of privilege vulnerability (CNVD-2016-03966)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA in the U.S. Mediaserver is one of the multimedia service components. An elevation vulnerability exists in Android's Mediaserver, which can be exploited by a local attacker to execut...

Android Mediaserver Remote Denial of Service Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A remote denial of service vulnerability exists in Android's Mediaserver. An attacker can exploit this vulnerability to cause a deni...

Android Mediaserver elevation of privilege vulnerability (CNVD-2016-03857)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA in the U.S. Mediaserver is one of the multimedia service components. An elevation of privilege vulnerability exists in Android's Mediaserver. A local attacker can exploit this...

Android Mediaserver Remote Code Execution Vulnerability (CNVD-2016-03851)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A remote code execution vulnerability exists in Android's Mediaserver. An attacker could exploit this vulnerability with a specially...