CVE-2016-2413

CVE-2016-2413 affects Android mediaserver: media/libmedia/IOMX.cpp in mediaserver does not initialize a handle pointer. This vulnerability enables a local attacker to gain privileges via a crafted application, demonstrated by obtaining Signature or SignatureOrSystem access. Affected Android versi...

CVE-2016-2416

CVE-2016-2416 is an information-disclosure flaw in Android mediaserver where libs/gui/BufferQueueConsumer.cpp does not check android.permission.DUMP, enabling a dump request to bypass protection and obtain signatures. Affected: Mediaserver component in Android 4.x up to 4.4.4, 5.0.x up to 5.0.2, ...

CVE-2016-2419

CVE-2016-2419 affects mediaserver (Android 6.x) where media/libmedia/IDrm.cpp does not initialize a key-request data structure, enabling information disclosure from process memory and bypass of an unspecified protection mechanism via unspecified vectors, with the attack demonstrated by obtaining ...

CVE-2016-2413

media/libmedia/IOMX.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not initialize a handle pointer, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka...

CVE-2016-2419

media/libmedia/IDrm.cpp in mediaserver in Android 6.x before 2016-04-01 does not initialize a certain key-request data structure, which allows attackers to obtain sensitive information from process memory, and consequently bypass an unspecified protection mechanism, via unspecified vectors, as...

CVE-2016-0841

media/libmedia/mediametadataretriever.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 mishandles cleared service binders, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a...

CVE-2016-2417

media/libmedia/IOMX.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not initialize a parameter data structure, which allows attackers to obtain sensitive information from process memory, and consequently bypass an unspecified...

CVE-2016-0840

Multiple stack-based buffer underflows in decoder/ih264dparsecavlc.c in mediaserver in Android 6.x before 2016-04-01 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 26399350...

CVE-2016-0836

Stack-based buffer overflow in decoder/impeg2dvld.c in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 25812590...

CVE-2016-0839

postproc/volumelistener.c in mediaserver in Android 6.x before 2016-04-01 mishandles deleted effect context, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 25753245...

CVE-2016-0835

decoder/impeg2ddechdr.c in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file that triggers a certain negative value, aka internal bug 26070014...

CVE-2016-0840

Multiple stack-based buffer underflows in decoder/ih264dparsecavlc.c in mediaserver in Android 6.x before 2016-04-01 allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 26399350...

CVE-2016-0836

CVE-2016-0836 is a stack-based buffer overflow in mediaserver's decoder/impeg2d_vld.c used by Android 6.x. The vulnerability allows remote attackers to trigger memory corruption and potentially execute code or cause a denial of service via a crafted media file. Affected component is mediaserver i...

CVE-2016-0841

media/libmedia/mediametadataretriever.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 mishandles cleared service binders, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a...

PT-2016-1765

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-04-01 Description The issue is caused by multiple stack-based buffer underflows in the decoder/ih264d parse cavlc.c function of the mediaserver component in Android. This allows remote attackers to execute...

PT-2016-1766

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-04-01 Description The issue is related to the post proc/volume listener.c function in the mediaserver component of the Android operating system. It is caused by a buffer overflow, which can be exploited by remote...

PT-2016-1764

Name of the Vulnerable Software and Affected Versions Android versions 4.x through 4.4.4 Android versions 5.0.x through 5.0.2 Android versions 5.1.x through 5.1.1 Android versions 6.x before 2016-04-01 Description The issue is caused by a buffer overflow in the...

PT-2016-1767

Name of the Vulnerable Software and Affected Versions Android versions 4.x through 4.4.4 Android versions 5.0.x through 5.0.2 Android versions 5.1.x through 5.1.1 Android versions 6.x before 2016-04-01 Description The issue is related to the Sonivox component in the mediaserver of Android, which...

PT-2016-1769

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-04-01 Description The issue is caused by a stack-based buffer overflow in the decoder/impeg2d vld.c function of the mediaserver component. This allows remote attackers to execute arbitrary code or cause a denial ...

PT-2016-1807

Name of the Vulnerable Software and Affected Versions Android versions 4.x through 4.4.4 Android versions 5.0.x through 5.0.2 Android versions 5.1.x through 5.1.1 Android versions 6.x before 2016-04-01 Description The issue allows attackers to obtain sensitive information from process memory and...