PT-2016-1869

Name of the Vulnerable Software and Affected Versions Android versions prior to 4.4.4 Android 5.0.x versions prior to 5.0.2 Android 5.1.x versions prior to 5.1.1 Android 6.x versions prior to 2016-05-01 Description The issue is related to the function codecs/on2/enc/SoftVPXEncoder.cpp in...

PT-2016-1870

Name of the Vulnerable Software and Affected Versions Android versions 4.x through 4.4.4 Android versions 5.0.x through 5.0.2 Android versions 5.1.x through 5.1.1 Android versions 6.x before 2016-05-01 Description The issue exists due to a lack of validation of template IDs in the Camera3Device.c...

PT-2016-1875

Name of the Vulnerable Software and Affected Versions Android versions 4.x through 4.4.4 Android versions 5.0.x through 5.0.2 Android versions 5.1.x through 5.1.1 Android versions 6.x before 2016-05-01 Description The issue is related to the libFLAC/stream decoder.c function in the mediaserver...

CVE-2016-2451: Undefined Security Weakness

codecs/on2/dec/SoftVPX.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not validate VPX output buffer sizes, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining...

CVE-2016-2429: Improper Restriction of Operations within the Bounds of a Memory Buffer

libFLAC/streamdecoder.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not prevent free operations on uninitialized memory, which allows remote attackers to execute arbitrary code or cause a denial of service heap memory corrupti...

CVE-2016-2448: Undefined Security Weakness

media/libmediaplayerservice/nuplayer/NuPlayerStreamListener.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not properly validate entry data structures, which allows attackers to gain privileges via a crafted application, as...

CVE-2016-2449: Undefined Security Weakness

services/camera/libcameraservice/device3/Camera3Device.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not validate template IDs, which allows attackers to gain privileges via a crafted application, as demonstrated by obtainin...

CVE-2016-2460: Exposure of Sensitive Information to an Unauthorized Actor

mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not initialize certain data structures, which allows attackers to obtain sensitive information via a crafted application, related to IGraphicBufferConsumer.cpp and...

CVE-2016-2428: Improper Restriction of Operations within the Bounds of a Memory Buffer

libAACdec/src/aacdecdrc.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not properly limit the number of threads, which allows remote attackers to execute arbitrary code or cause a denial of service stack memory corruption via...

CVE-2016-2459: Exposure of Sensitive Information to an Unauthorized Actor

mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 does not initialize certain data structures, which allows attackers to obtain sensitive information via a crafted application, related to IGraphicBufferConsumer.cpp and...

Android Mediaserver Information Disclosure Vulnerability (CNVD-2016-02843)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. An information disclosure vulnerability exists in Android's Mediaserver, which can be exploited by attackers to access sensitive...

Android Mediaserver Privilege Mobilization Vulnerability (CNVD-2016-02848)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A privilege escalation vulnerability exists in Android's Mediaserver, which can be exploited by a local attacker with the help of a...

Android Mediaserver Privilege Mobilization Vulnerability (CNVD-2016-02846)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A power-up vulnerability exists in Android's Mediaserver, which can be exploited by a local attacker with the help of a malicious...

Android Mediaserver Arbitrary Code Execution Vulnerability (CNVD-2016-02841)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. An arbitrary code execution vulnerability exists in Android's Mediaserver, which can be exploited by remote attackers to cause memor...

Android Mediaserver Arbitrary Code Execution Vulnerability (CNVD-2016-02842)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. An arbitrary code execution vulnerability exists in Android's Mediaserver, which can be exploited by remote attackers to cause memor...

Android Mediaserver Privilege Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A privilege escalation vulnerability exists in Android's Mediaserver, which can be exploited by a local attacker with the help of a...

Android Mediaserver Privilege Mobilization Vulnerability (CNVD-2016-02847)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A privilege escalation vulnerability exists in Android's Mediaserver, which can be exploited by a local attacker with the help of a...

Android Mediaserver Privilege Mobilization Vulnerability (CNVD-2016-02845)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A power-up vulnerability exists in Android's Mediaserver, which can be exploited by a local attacker with the help of a malicious...

Android Mediaserver Information Disclosure Vulnerability (CNVD-2016-02844)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA in the U.S. Mediaserver is one of the multimedia service components. An information disclosure vulnerability exists in Android's Mediaserver, which can be exploited by attackers to...

The vulnerability of the Android operating system allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the MPEG4Extractor.cpp function in the libstagefright library of the mediaserver component in the Android operating system is due to a buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures such as out-of-memory...