CVE-2017-0642

A remote denial of service vulnerability in libhevc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 5.0.2, 5.1.1, 6.0,...

LG MRA58K - ASFParser::ParseHeaderExtensionObjects Missing Bounds-Checking Exploit

Exploit for Android platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1222 There is a memcpy in ASFParser::ParseHeaderExtensionObjects which doesn't check that the size of the copy is smaller than the size of the source buffer, resulting in an...

PT-2017-2307

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.1 Description A remote denial of service issue in Mediaserver could allow an attacker to cause a device hang or reboot using a specially crafted file. This issue is rated as High severity due to the possibility...

PT-2017-2305

Name of the Vulnerable Software and Affected Versions Android versions 5.0.2 through 7.1.2 Description A remote code execution issue in the libhevc component of the Mediaserver in Android could allow an attacker to cause memory corruption during media file and data processing using a specially...

PT-2017-2308

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1 Description A remote denial of service issue in Mediaserver could allow an attacker to use a specially crafted file to cause a device hang or reboot. This issue is related to insufficient access...

PT-2017-2309

Name of the Vulnerable Software and Affected Versions Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1 Description A remote denial of service issue in Mediaserver could allow an attacker to use a specially crafted file to cause a device hang or reboot. This issue is related to insufficient...

PT-2017-2310

Name of the Vulnerable Software and Affected Versions Android versions 5.0.2 through 7.1.2 Description A remote denial of service issue in the libhevc library of the Mediaserver component could allow an attacker to cause a device hang or reboot using a specially crafted file. This issue is relate...

PT-2017-2311

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 Description A remote denial of service issue in the libvpx library of the Mediaserver in Android could allow an attacker to cause a device hang or reboot using a specially...

CVE-2017-0644: Undefined Security Weakness

A remote denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1...

CVE-2017-0643: Undefined Security Weakness

A remote denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0,...

CVE-2017-0642: Undefined Security Weakness

A remote denial of service vulnerability in libhevc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 5.0.2, 5.1.1, 6.0,...

CVE-2017-0641: Improper Initialization

A remote denial of service vulnerability in libvpx in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6....

CVE-2017-0640: Undefined Security Weakness

A remote denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android I...

CVE-2017-0637: Improper Restriction of Operations within the Bounds of a Memory Buffer

A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the...

LG MRA58K - 'ASFParser::ParseHeaderExtensionObjects' Missing Bounds-Checking

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1222 There is a memcpy in ASFParser::ParseHeaderExtensionObjects which doesn't check that the size of the copy is smaller than the size of the source buffer, resulting in an out-of-bounds heap read. The vulnerable code appears to b...

The vulnerability of the Android operating system, which allows a perpetrator to cause the device to freeze or restart.

The vulnerability in HevcUtils.cpp within the libstagefright Mediaserver library of the Android operating system is related to resource management errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause the device to freeze or restart through a specially...

The vulnerability of the mm-video-v4l2 venc component in the Mediaserver application of the Android operating system allows a hacker to increase their privileges.

The vulnerability of the mm-video-v4l2 venc component in the Mediaserver application of the Android operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges through a specially...

CVE-2017-0637

A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the...

A vulnerability in the libhevc component of the Android operating system’s Mediaserver application allows a hacker to trigger memory corruption and inject arbitrary code into the Mediaserver context.

The vulnerability in the libhevc component of the Android operating system’s Mediaserver application arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause memory corruption and inject arbitrary code into the Mediaserver...

The vulnerability of the Mediaserver application’s libhevc service in the Android operating system allows a hacker to cause a service failure.

The vulnerability of the Mediaserver application’s libhevc service stems from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause a service failure memory corruption by using a specially created file...