CVE-2016-0828

The BnGraphicBufferConsumer::onTransact function in libs/gui/IGraphicBufferConsumer.cpp in mediaserver in Android 5.x before 5.1.1 LMY49H and 6.x before 2016-03-01 does not initialize a certain slot variable, which allows attackers to obtain sensitive information, and consequently bypass an...

CVE-2016-0829

The BnGraphicBufferProducer::onTransact function in libs/gui/IGraphicBufferConsumer.cpp in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 does not initialize a certain output data structure, which allows attackers to obtain sensitive information, and...

CVE-2016-0826

libcameraservice in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 does not require use of the ICameraService::dump method for a camera service dump, which allows attackers to gain privileges via a crafted application that directly dumps, as demonstrat...

CVE-2016-0815

CVE-2016-0815 affects the mediaserver component of Android, specifically the MPEG4Source::fragmentedRead function in MPEG4Extractor.cpp within libstagefright. The vulnerability exists on Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01, where processing a crafted media...

CVE-2016-0829

The CVE-2016-0829 issue affects Android mediaserver and is triggered in the BnGraphicBufferProducer::onTransact path within libs/gui/IGraphicBufferConsumer.cpp. The root cause is failure to initialize a specific output data structure in Mediaserver, allowing an attacker to read leaked data and by...

CVE-2016-0828

The CVE concerns Android mediaserver: BnGraphicBufferConsumer::onTransact in libs/gui/IGraphicBufferConsumer.cpp failing to initialize a slot variable. This uninitialized state can let a remote attacker trigger an ATTACH_BUFFER action to read sensitive data and bypass a protection mechanism. Affe...

CVE-2016-0816

The CVE-2016-0816 issue affects mediaserver on Android 6.x (before March 1, 2016). The vulnerability allows remote code execution or memory corruption via a crafted media file, related to decoder/ih264d_parse_islice.c and decoder/ih264d_parse_pslice.c (internal bug 25928803). Affects the Mediaser...

CVE-2016-1621

libvpx in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.0 before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, related to libwebm/mkvparser.cpp and other files, aka internal bug...

CVE-2016-0826

CVE-2016-0826 affects libcameraservice in mediaserver on Android 4.x (before 4.4.4), 5.x (before 5.1.1 LMY49H), and 6.x (before 2016-03-01). The issue is that the camera service dump path does not require use of ICameraService::dump, allowing a crafted application to dump data directly and obtain...

CVE-2016-0827

The CVE-2016-0827 issue affects Android mediaserver’s libeffects across Android 4.x (before 4.4.4), 5.x (before 5.1.1 LMY49H), and 6.x (before 2016-03-01). The root cause is multiple integer overflows in libeffects (notably in EffectBundle.cpp and EffectReverb.cpp) that can allow a crafted applic...

Google Nexus Mediaserver Denial of Service Vulnerability (CNVD-2016-01544)

Google Nexus is a series of smart devices based on the Android operating system developed by the U.S. company Google Google, including cell phones and tablet computers. The smart device by Google to provide technology and authorize the cooperation of hardware manufacturers for production and...

Google Nexus Mediaserver Denial of Service Vulnerability

Google Nexus is a series of smart devices based on the Android operating system developed by the U.S. company Google Google, including cell phones and tablet computers. The smart device by Google to provide technology and authorize the cooperation of hardware manufacturers for production and...

Google Nexus mediaserver memory corruption vulnerability

Google Nexus is a series of smart devices based on the Android operating system developed by the U.S. company Google Google, including cell phones and tablet computers. The smart device by Google to provide technology and authorize the cooperation of hardware manufacturers for production and...

Google Fixes Critical Mediaserver Bug, Again

Google today patched two critical holes in its problematic Android Mediaserver component which would allow an attacker to use email, web browsing, and MMS processing of media files to remotely execute code. With this latest vulnerability, Google has patched its Mediaserver more than two dozen tim...

CVE-2016-0816

mediaserver in Android 6.x before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, related to decoder/ih264dparseislice.c and decoder/ih264dparsepslice.c, aka internal bug 25928803...

CVE-2016-0815

The MPEG4Source::fragmentedRead function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file...

Android Memory Corruption Vulnerability (CNVD-2016-01096)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. mediaserver is one of the multimedia service components. A security vulnerability exists in the libstagefright library in Android's mediaserver. The vulnerability can be exploited ...

Android mediaserver arbitrary code execution vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A security vulnerability exists in Android that allows remote attackers to execute arbitrary code with mediaserver privileges...

Android Mediaserver Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A security vulnerability exists in Android Mediaserver, which allows remote attackers to exploit the vulnerability to elevate privileges...

CVE-2016-0810

media/libmedia/SoundPool.cpp in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 mishandles locking requirements, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka...