PT-2017-1912

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.1 Description An information disclosure issue in the Mediaserver's libavc component could allow a local malicious application to access data outside of its permission levels, potentially leading to unauthorized...

PT-2017-1896

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.1 Description A remote code execution issue in the libavc component of Mediaserver could allow an attacker to cause memory corruption during media file processing by using a specially crafted file. This issue i...

PT-2017-1898

Name of the Vulnerable Software and Affected Versions Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1 Description A remote code execution issue in the libhevc component of Mediaserver could allow an attacker to cause memory corruption during media file and data processing using a specially...

PT-2017-1899

Name of the Vulnerable Software and Affected Versions Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1 Description A remote code execution issue in the libhevc component of Mediaserver could allow an attacker to cause memory corruption during media file and data processing using a specially...

PT-2017-1911

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.1 Description An information disclosure issue in the libmpeg2 component of the Mediaserver in Android could allow a local malicious application to access data outside of its permission levels. This could be use...

PT-2017-1909

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1 Description An information disclosure issue in Mediaserver could allow a local malicious application to access data outside of its permission levels. This issue could be used to acce...

PT-2017-1915

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.1 Description A remote denial of service issue in the Mediaserver's libavc component could allow an attacker to cause a device hang or reboot using a specially crafted file. This issue is related to inadequate...

PT-2017-1918

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.1 Description A remote denial of service issue in the Mediaserver's libavc component could allow an attacker to cause a device hang or reboot using a specially crafted file. This issue is related to inadequate...

PT-2017-1891

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1 Description An information disclosure issue in the Mediaserver component could allow a local malicious application to access data outside of its permission levels, effectively...

PT-2017-1910

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.1 Description An information disclosure issue in the libmpeg2 component of the Mediaserver could allow a local malicious application to access data outside of its permission levels, potentially leading to...

PT-2017-1900

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.1 Description A remote code execution issue in the libavc component of Mediaserver could allow an attacker to cause memory corruption during media file and data processing using a specially crafted file. This...

CVE-2017-0555: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability in libavc in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access data without permission. Product: Android. Versions: 6.0, 6.0.1, 7.0,...

PT-2017-1897

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1 Description A remote code execution issue in the sonivox component of Mediaserver could allow an attacker to cause memory corruption during media file and data processing using a...

PT-2017-1895

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.1 Description A remote code execution issue in the libavc component of Mediaserver could allow an attacker to cause memory corruption during media file processing by using a specially crafted file. This issue i...

PT-2017-1916

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.1 Description The issue is related to insufficient access control in the libavc service of the Mediaserver application in the Android operating system. It allows a remote attacker to cause a device hang or rebo...

Google Android Mediaserver Multiple Denial of Service Vulnerabilities（CVE-2017-0392）

VBRISeeker::CreateFromSource may cause an uncaught c++ exception due to trying to allocate a buffer where the size is attacker controllable. Fix: https://android.googlesource.com/platform/frameworks/av/+/453b351ac5bd2b6619925dc966da60adf6b3126c PoC:...

CVE-2017-0543

A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the...

CVE-2017-0542

A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the...

CVE-2017-0541

A remote code execution vulnerability in sonivox in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the...

CVE-2017-0538

A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the...