PT-2016-2670

Name of the Vulnerable Software and Affected Versions Android versions 4.x through 4.4.3 Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-08-01 Description The secure-session feature in the mm-video-v4l2 venc component of the mediaserver i...

PT-2016-2669

Name of the Vulnerable Software and Affected Versions Android versions prior to 4.4.4 Android versions 5.0.x prior to 5.0.2 Android versions 5.1.x prior to 5.1.1 Android versions 6.x before 2016-08-01 Description The issue is related to a lack of validation for the reply size of an AudioFlinger...

PT-2016-2561

Name of the Vulnerable Software and Affected Versions Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-08-01 Description The issue is related to the allocation of an incorrect amount of memory in the mm-video-v4l2/vidc/venc/src/omx video...

Google Android Mediaserver Denial of Service Vulnerability (CNVD-2016-06129)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A denial of service vulnerability exists in Mediaserver in Android. An attacker can exploit this vulnerability to cause a device to...

CVE-2016-3820: Improper Restriction of Operations within the Bounds of a Memory Buffer

The ih264d decoder in mediaserver in Android 6.x before 2016-08-01 mishandles slice numbers, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 28673410...

CVE-2016-3819: Improper Restriction of Operations within the Bounds of a Memory Buffer

Integer overflow in codecs/on2/h264dec/source/h264bsddpb.c in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted...

CVE-2016-3821: NULL Pointer Dereference

libmedia in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 has certain incorrect declarations, which allows remote attackers to execute arbitrary code or cause a denial of service NULL pointer dereference or memory corruption via a craft...

PT-2016-2545

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the mediaserver component in Android, which has inadequate access control. This allows attackers to gain privileges via a crafted application. The estimated number of...

CVE-2016-3830: Improper Input Validation

codecs/aacdec/SoftAAC2.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows remote attackers to cause a denial of service device hang or reboot via crafted ADTS data, aka internal bug 29153599...

CVE-2016-3829: Encoding Error

The ih264d decoder in mediaserver in Android 6.x before 2016-08-01 does not initialize certain structure members, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 29023649...

PT-2016-2559

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-01 Description The issue is related to the handling of invalid PPS and SPS NAL units in the decoder/ih264d api.c file within the mediaserver of Android. This can be exploited by remote attackers to cause a...

CVE-2016-3835: Exposure of Sensitive Information to an Unauthorized Actor

The secure-session feature in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 mishandles heap pointers, which allows attackers to obtain sensitive information via a crafted application, aka internal bug...

CVE-2016-3823: Improper Restriction of Operations within the Bounds of a Memory Buffer

The secure-session feature in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 mishandles heap pointers, which allows attackers to gain privileges via a crafted application, aka internal bug 28815329...

CVE-2016-3844: Undefined Security Weakness

mediaserver in Android before 2016-08-05 on Nexus 9 and Pixel C devices allows attackers to gain privileges via a crafted application, aka internal bug 28299517...

How Bugs Lead to a Better Android

Google is used to taking a beating over Android vulnerabilities, but it says too often its hard work fixing vulnerabilities and keeping the platform safe goes unnoticed. “Over the seven years working on Android security vulnerabilities I’ve seen a lot of bugs and a lot of fear uncertainty and...

Android Mediaserver Denial of Service Vulnerability (CNVD-2016-06012)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A denial of service vulnerability exists in Mediaserver in Android. The vulnerability can be exploited to cause a device to hang or...

Android 8 on the security patch risk assessment-vulnerability warning-the black bar safety net

This month, a total of 1 0 5 a security vulnerability,wherein Critical: 1 to 3 High: 7 to 9 Moderate13 a Wherein: belongs to the Aosp section of a 2 6, the drive and the kernel of a 7 9 one. The following is the 7 month the number of vulnerabilities comparison chart: ! ! Vulnerability distributio...

Android Mediaserver Privilege Mobilization Vulnerability (CNVD-2016-06011)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA in the U.S. Mediaserver is one of the multimedia service components. A power lifting vulnerability exists in Mediaserver in Android. This vulnerability can be exploited by a local...

August 2016 Android Security Bulletin

Google today patched more than three-dozen critical vulnerabilities in Qualcomm components embedded in the Android operating system, all of them allowing attackers to gain a foothold on devices to launch further attacks. The Qualcomm-related patches are among dozens in the monthly Android Securit...

CVE-2016-3820

The ih264d decoder in mediaserver in Android 6.x before 2016-08-01 mishandles slice numbers, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 28673410...