CVE-2016-3828

CVE-2016-3828 affects Android Mediaserver (decoder/ih264d_api.c) in Android 6.x prior to the 2016-08-01 patch, where invalid PPS/SPS NAL units are mishandled, enabling a crafted media file to cause a denial of service (device hang or reboot). The issue is categorized as a Mediaserver DoS vulnerab...

CVE-2016-3820

The CVE-2016-3820 issue affects the ih264d decoder in Mediaserver (Android 6.x). The root cause is the decoder mishandling slice numbers, enabling a remote attacker to craft a media file that could trigger arbitrary code execution or memory corruption within Mediaserver. Public details confirm im...

CVE-2016-3826

The CVE-2016-3826 advisory affects Android’s Mediaserver component, specifically the AudioFlinger path (services/audioflinger/Effects.cpp). The root cause is that the reply size for an AudioFlinger effect command is not validated, enabling a crafted application to escalate privileges within the d...

CVE-2016-3827

CVE-2016-3827 affects Android 6.0.1 Mediaserver (libstagefright: codecs/hevcdec/SoftHEVC.cpp). The root cause is mishandling decoder errors, enabling a denial of service (device hang or reboot) via a crafted media file. Affected的是MediaServer/Mediaserver component; no explicit exploit details are ...

CVE-2016-3819

CVE-2016-3819 involves an integer overflow in codecs/on2/h264dec/source/h264bsd_dpb.c within libstagefright/Mediaserver on Android. A crafted media file can trigger memory corruption, enabling remote code execution or a denial of service. Affected Android lineages include 4.x before 4.4.4, 5.0.x ...

CVE-2016-3830

CVE-2016-3830 affects Android Mediaserver’s Mediaserver component, specifically codecs/aacdec/SoftAAC2.cpp in libstagefright. The underlying flaw allows a crafted ADTS data packet to trigger a denial of service, causing device hang or reboot. Affected Android branch versions are 4.x before 4.4.4,...

CVE-2016-3821

CVE-2016-3821 affects libmedia in mediaserver (Android Mediaserver). Affected Android versions include 4.x before 4.4.4, 5.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01; the issue arises from certain incorrect declarations that allow remote code execution or a denial of service (N...

CVE-2016-3828

decoder/ih264dapi.c in mediaserver in Android 6.x before 2016-08-01 mishandles invalid PPS and SPS NAL units, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 28835995...

CVE-2016-3823

The secure-session feature in the mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 mishandles heap pointers, which allows attackers to gain privileges via a crafted application, aka internal bug 28815329...

Google Android Mediaserver Remote Code Execution Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A remote code execution vulnerability exists in Mediaserver in Android. A remote attacker could exploit this vulnerability to cause...

Google Android Mediaserver Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. An elevation of privilege vulnerability exists in Mediaserver in Android. An attacker can exploit this vulnerability to execute...

Google Android Mediaserver elevation of privilege vulnerability (CNVD-2016-06126)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A security vulnerability exists in Mediaserver in Android, which can be exploited by a remote attacker to build special applications, induce application parsing, and elevate privileges...

Google Android Mediaserver Remote Code Execution Vulnerability (CNVD-2016-06118)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A remote code execution vulnerability exists remotely in Mediaserver in Android. An attacker can exploit this vulnerability to cause...

Google Android Mediaserver Denial of Service Vulnerability (CNVD-2016-06129)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A denial of service vulnerability exists in Mediaserver in Android. An attacker can exploit this vulnerability to cause a device to...

Google Android Information Disclosure Vulnerability (CNVD-2016-06134)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A security vulnerability exists in Mediaserver in Android, which can be exploited by a remote attacker to build a special application and induce the application to parse and access...

Google Android Mediaserver Remote Code Execution Vulnerability (CNVD-2016-06119)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA in the U.S. Mediaserver is one of the multimedia service components. A remote code execution vulnerability exists in Mediaserver in Android. A remote attacker could exploit this...

Google Android Mediaserver Denial of Service Vulnerability (CNVD-2016-06128)

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A denial of service vulnerability exists in Mediaserver in Android. An attacker can exploit this vulnerability to cause a device to...

Google Android Mediaserver Denial of Service Vulnerability

Android is a Linux-based open source operating system developed by Google and the Open Handset Alliance OHA, of which Mediaserver is a multimedia service component. A denial of service vulnerability exists in Mediaserver in Android. An attacker can exploit this vulnerability to cause a device to...

Google Android Mediaserver elevation of privilege vulnerability (CNVD-2016-06127)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A security vulnerability exists in Mediaserver in Android, which can be exploited by a remote attacker to build special applications, induce application parsing, and elevate privileges...

How Bugs Lead to a Better Android

Google is used to taking a beating over Android vulnerabilities, but it says too often its hard work fixing vulnerabilities and keeping the platform safe goes unnoticed. “Over the seven years working on Android security vulnerabilities I’ve seen a lot of bugs and a lot of fear uncertainty and...