CVE-2017-0599

CVE-2017-0599 is a remote denial-of-service vulnerability in Android’s Mediaserver, specifically the libhevc component. A specially crafted media file could cause a device hang or reboot. Affected products/versions in the provided documents: Android 6.0–7.1.2. The description in the connected sou...

CVE-2017-0590

CVE-2017-0590 describes a remote code execution in the Mediaserver component of Android via a crafted media file that triggers memory corruption in the libhevc path. Affected products/versions include Android releases 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2. The vulnerability stems from a...

CVE-2017-0587

A remote code execution vulnerability in libmpeg2 in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the...

CVE-2017-0595

An elevation of privilege vulnerability in libstagefright in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are n...

CVE-2017-0594

CVE-2017-0594 affects Android Mediaserver’s Mediaserver component, specifically codecs/aacenc/SoftAACEncoder2.cpp in libstagefright. The issue is an elevation of privilege vulnerability that could allow a local malicious application to execute arbitrary code within the context of a privileged pro...

CVE-2017-0635

A remote denial of service vulnerability in HevcUtils.cpp in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as Low due to details specific to the vulnerability. Product: Android. Versions: 7.0, 7.1.1,...

CVE-2017-0599

A remote denial of service vulnerability in libhevc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1...

CVE-2017-0600

A remote denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2,...

CVE-2017-0590

A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the...

CVE-2017-0595

Mode C: CVE-2017-0595 affects Android Mediaserver (libstagefright) and is an elevation-of-privilege flaw that could let a local malicious app execute code in the context of a privileged process. Affected products/versions include Android 4.4.4–7.1.1. Root cause is described as memory/process hand...

CVE-2017-0594

An elevation of privilege vulnerability in codecs/aacenc/SoftAACEncoder2.cpp in libstagefright in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access ...

CVE-2017-0603

CVE-2017-0603 describes a denial-of-service in libstagefright within Mediaserver on Android. A crafted media file could cause a device hang or reboot. Affected versions: Android 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Root cause: DoS condition in Mediaserver/libstagefright. Impact: Mo...

CVE-2017-0596

CVE-2017-0596 is an Android Mediaserver (libstagefright) elevation-of-privilege vulnerability. The issue could allow a local malicious app to execute code with the privileges of Mediaserver. Affected products/versions listed in sources include Android 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, and 7.1...

Google Android Mediaserver Denial of Service Vulnerability (CNVD-2017-07547)

Google Android is a Linux-based operating system for smartphone devices. A denial of service vulnerability exists in Google Android Mediaserver, which can be exploited by remote attackers to construct malicious files and trick users into parsing them, which can crash the system...

LG G4 MRA58K - liblg_parser_mkv.so Bad Allocation Calls Exploit

Exploit for Android platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1102 In both of the following functions mkvparser::AudioTrack::AudioTrackmkvparser::Segment, mkvparser::Track::Info const&, long long, long long...

Google Android Mediaserver elevation of privilege vulnerability (CNVD-2017-06872)

Google Android is a Linux-based operating system for smartphone devices. A security vulnerability exists in Google Android Mediaserver, which can be exploited by remote attackers to build malicious applications, execute arbitrary code, and elevate privileges...

Google Android Mediaserver Denial of Service Vulnerability (CNVD-2017-08228)

Google Android is a Linux-based operating system for smartphone devices. A denial of service vulnerability exists in Google Android Mediaserver, which can be exploited by remote attackers to construct malicious files and trick users into parsing them, which can crash the system...

Google Android Mediaserver elevation of privilege vulnerability (CNVD-2017-06873)

Google Android is a Linux-based operating system for smartphone devices. A security vulnerability exists in Google Android Mediaserver, which can be exploited by remote attackers to build malicious applications, execute arbitrary code, and elevate privileges...

LG G4 MRA58K - mkvparser::Block::Block Heap Buffer Overflows Exploit

Exploit for Android platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1124 There are multiple paths in mkvparser::Block::Block... that result in heap buffer overflows. See attached for sample files that trigger the overflow conditions - these will no...

LG G4 MRA58K - liblg_parser_mkv.so Bad Allocation Calls

LG G4 MRA58K - liblgparsermkv.so Bad Allocation Calls Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1102 In both of the following functions mkvparser::AudioTrack::AudioTrackmkvparser::Segment, mkvparser::Track::Info const&, long long, long long...