CVE-2018-7993

HUAWEI Mate 10 smartphones with versions earlier than ALP-AL00 8.1.0.311 have a use after free vulnerability on mediaserver component. An attacker tricks the user install a malicious application, which make the software to reference memory after it has been freed. Successful exploit could cause...

CVE-2018-7993

CVE-2018-7993 concerns a use-after-free vulnerability in the mediaserver component on Huawei Mate 10 devices running versions before ALP-AL00 8.1.0.311. An attacker can entice a user to install a malicious app, which causes mediaserver to reference memory after it has been freed, enabling arbitra...

PT-2018-18363

Name of the Vulnerable Software and Affected Versions: HUAWEI Mate 10 smartphones versions prior to ALP-AL00 8.1.0.311 Description: The issue is related to a use after free vulnerability on the mediaserver component. An attacker could trick the user into installing a malicious application, which...

CVE-2018-7993: Use After Free

HUAWEI Mate 10 smartphones with versions earlier than ALP-AL00 8.1.0.311 have a use after free vulnerability on mediaserver component. An attacker tricks the user install a malicious application, which make the software to reference memory after it has been freed. Successful exploit could cause...

The vulnerability of the dynamic library Qualcomm Libgralloc of the MediaServer component of the Android operating system from the CAF repository allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dynamic library Qualcomm Libgralloc of the Android operating system’s MediaServer component, originating from the CAF repository, is related to a pointer offset that extends beyond the allocated memory range. Exploiting this vulnerability could allow an attacker to...

Huawei Mate 10 Phone Memory Misreference Vulnerability

Huawei Mate 10 is a smartphone from Chinese company Huawei Huawei. A memory misreference vulnerability exists in the mediaserver component of the Huawei Mate 10 phone. An attacker induces a user to install a malicious application that causes certain freed memory to be accessed again. Successful...

Security Advisory - Use After Free Vulnerability on Smartphone

There is a use after free vulnerability on mediaserver component in smartphone. An attacker tricks the user install a malicious application, which make the software to reference memory after it has been freed. Successful exploit could cause execution of arbitrary code. Vulnerability ID:...

Design/Logic Flaw

A crafted binder request can cause an arbitrary unmap in MediaServer in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel...

CVE-2017-18154

A crafted binder request can cause an arbitrary unmap in MediaServer in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel...

CVE-2017-18154

A crafted binder request can cause an arbitrary unmap in MediaServer in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel...

CVE-2017-18154

CVE-2017-18154 describes a local elevation-of-privilege issue in Android’s media stack: a crafted binder request can trigger an arbitrary unmap in MediaServer on CAF-based Android (Android for MSM, Firefox OS for MSM, QRD Android) via the Linux kernel. Public details in NVD/Android bulletins indi...

CVE-2017-18154: Improper Restriction of Operations within the Bounds of a Memory Buffer

A crafted binder request can cause an arbitrary unmap in MediaServer in all Android releases from CAF Android for MSM, Firefox OS for MSM, QRD Android using the Linux Kernel...

PT-2018-1350

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to a crafted binder request that can cause an arbitrary unmap in MediaServer, potentially affecting all Android releases from CAF. It is also described as a vulnerability...

Design/Logic Flaw

libOmxVenc in Android for MSM, Firefox OS for MSM, and QRD Android copies the output buffer to an application with the "filled length", which is larger than the output buffer's actual size, leading to an information disclosure problem in the context of mediaserver...

CVE-2017-11087

libOmxVenc in Android for MSM, Firefox OS for MSM, and QRD Android copies the output buffer to an application with the "filled length", which is larger than the output buffer's actual size, leading to an information disclosure problem in the context of mediaserver...

CVE-2017-11087

libOmxVenc in Android for MSM, Firefox OS for MSM, and QRD Android copies the output buffer to an application with the "filled length", which is larger than the output buffer's actual size, leading to an information disclosure problem in the context of mediaserver...

CVE-2017-11087

CVE-2017-11087 affects libOmxVenc in Android for MSM, Firefox OS for MSM, and QRD Android. The issue arises when the mediaserver path copies the output buffer to an application using the “filled length,” which can exceed the output buffer’s actual size, causing an information disclosure. Publicly...

CVE-2017-11087: Exposure of Sensitive Information to an Unauthorized Actor

libOmxVenc in Android for MSM, Firefox OS for MSM, and QRD Android copies the output buffer to an application with the "filled length", which is larger than the output buffer's actual size, leading to an information disclosure problem in the context of mediaserver...

PT-2018-5318

Name of the Vulnerable Software and Affected Versions Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description The issue is related to the libOmxVenc component, which copies the output buffer to an...

Buffer overflow

A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow remote attackers to execute arbitrary code and/or cause denial of service on the victim machine/computer via a long string to TCP port 888...