PT-2017-2070

Name of the Vulnerable Software and Affected Versions Android versions 5.0.2 through 7.1.2 Description A remote code execution issue in libhevc in Mediaserver could allow an attacker to cause memory corruption during media file and data processing using a specially crafted file. This could enable...

PT-2017-2043

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1 Description An elevation of privilege issue in libstagefright in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged...

PT-2017-2048

Name of the Vulnerable Software and Affected Versions Android versions 5.0.2 through 7.1.2 Description The issue is caused by a buffer overflow in the libhevc service of the Mediaserver application in the Android operating system. This can allow a remote attacker to cause memory corruption by usi...

PT-2017-2049

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 Description The issue is related to insufficient access control in the libstagefright service of the Mediaserver application in the Android operating system. It allows a remot...

PT-2017-2072

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.2 Description A remote code execution issue in libmpeg2 in Mediaserver could allow an attacker to cause memory corruption during media file and data processing using a specially crafted file. This issue is rate...

PT-2017-2176

Name of the Vulnerable Software and Affected Versions Android versions 7.0, 7.1.1, 7.1.2 Description A remote denial of service issue in HevcUtils.cpp in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is related ...

PT-2017-10571

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 Description A denial of service issue in libstagefright in Mediaserver could allow an attacker to cause a device hang or reboot using a specially crafted file. This issue...

PT-2017-2071

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 Description A remote code execution issue in the Mediaserver process could allow an attacker to cause memory corruption during media file and data processing using a specially...

PT-2017-2046

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2 Description A remote code execution issue in the FLACExtractor.cpp function within the libstagefright component of the Mediaserver in Android could allow an attacker to cause...

CVE-2017-0600: Undefined Security Weakness

A remote denial of service vulnerability in libstagefright in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2,...

Google Android Mediaserver elevation of privilege vulnerability (CNVD-2017-06872)

Google Android is a Linux-based operating system for smartphone devices. A security vulnerability exists in Google Android Mediaserver, which can be exploited by remote attackers to build malicious applications, execute arbitrary code, and elevate privileges...

Google Android Mediaserver Denial of Service Vulnerability (CNVD-2017-07547)

Google Android is a Linux-based operating system for smartphone devices. A denial of service vulnerability exists in Google Android Mediaserver, which can be exploited by remote attackers to construct malicious files and trick users into parsing them, which can crash the system...

Google Android Mediaserver Denial of Service Vulnerability (CNVD-2017-08228)

Google Android is a Linux-based operating system for smartphone devices. A denial of service vulnerability exists in Google Android Mediaserver, which can be exploited by remote attackers to construct malicious files and trick users into parsing them, which can crash the system...

LG G4 MRA58K - mkvparser::Block::Block Heap Buffer Overflows Exploit

Exploit for Android platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1124 There are multiple paths in mkvparser::Block::Block... that result in heap buffer overflows. See attached for sample files that trigger the overflow conditions - these will no...

LG G4 MRA58K - liblg_parser_mkv.so Bad Allocation Calls Exploit

Exploit for Android platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1102 In both of the following functions mkvparser::AudioTrack::AudioTrackmkvparser::Segment, mkvparser::Track::Info const&, long long, long long...

LG G4 MRA58K - liblg_parser_mkv.so Bad Allocation Calls

LG G4 MRA58K - liblgparsermkv.so Bad Allocation Calls Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1102 In both of the following functions mkvparser::AudioTrack::AudioTrackmkvparser::Segment, mkvparser::Track::Info const&, long long, long long...

LG G4 MRA58K - mkvparser::Block::Block Heap Buffer Overflow

LG G4 MRA58K - mkvparser::Block::Block Heap Buffer Overflow Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1124 There are multiple paths in mkvparser::Block::Block... that result in heap buffer overflows. See attached for sample files that trigger the overflow conditions - thes...

Google Android Mediaserver elevation of privilege vulnerability (CNVD-2017-06873)

Google Android is a Linux-based operating system for smartphone devices. A security vulnerability exists in Google Android Mediaserver, which can be exploited by remote attackers to build malicious applications, execute arbitrary code, and elevate privileges...

LG G4 MRA58K - 'liblg_parser_mkv.so' Bad Allocation Calls

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1102 In both of the following functions mkvparser::AudioTrack::AudioTrackmkvparser::Segment, mkvparser::Track::Info const&, long long, long long mkvparser::VideoTrack::VideoTrackmkvparser::Segment, mkvparser::Track::Info const&, lo...

Google Android Mediaserver Remote Code Execution Vulnerability (CNVD-2017-07093)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A code execution vulnerability exists in the Mediaserver component of Android. A remote attacker can exploit this vulnerability to...