EUVD-2015-3871

Malware in sbrugna...

CVE-2017-13183

In the OMXNodeInstance::useBuffer and IOMX::freeBuffer functions, there is a possible use after free due to a race condition if the user frees the buffer while it's being used in another thread. This could lead to a local elevation of privilege enabling code execution as a privileged process with...

Race condition

In the OMXNodeInstance::useBuffer and IOMX::freeBuffer functions, there is a possible use after free due to a race condition if the user frees the buffer while it's being used in another thread. This could lead to a local elevation of privilege enabling code execution as a privileged process with...

CVE-2017-13183

In the OMXNodeInstance::useBuffer and IOMX::freeBuffer functions, there is a possible use after free due to a race condition if the user frees the buffer while it's being used in another thread. This could lead to a local elevation of privilege enabling code execution as a privileged process with...

PT-2018-5494

Name of the Vulnerable Software and Affected Versions: Android versions 8.1 Description: The issue is related to a possible use after free due to a race condition in the OMXNodeInstance::useBuffer and IOMX::freeBuffer functions. This could lead to a local elevation of privilege, enabling code...

CVE-2017-13183: Concurrent Execution using Shared Resource with Improper Synchronization

In the OMXNodeInstance::useBuffer and IOMX::freeBuffer functions, there is a possible use after free due to a race condition if the user frees the buffer while it's being used in another thread. This could lead to a local elevation of privilege enabling code execution as a privileged process with...

Buffer overflow

Buffer overflow in the OMXNodeInstance::emptyBuffer function in omx/OMXNodeInstance.cpp in libstagefright in Android before 5.1.1 LMY48I allows attackers to execute arbitrary code via a crafted application, aka internal bug 20634516...

CVE-2015-3835

Buffer overflow in the OMXNodeInstance::emptyBuffer function in omx/OMXNodeInstance.cpp in libstagefright in Android before 5.1.1 LMY48I allows attackers to execute arbitrary code via a crafted application, aka internal bug 20634516...

PT-2015-2216

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48I Description The issue is caused by a buffer overflow in the OMXNodeInstance::emptyBuffer function in libstagefright. This allows attackers to execute arbitrary code via a crafted application...

CVE-2015-3835: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the OMXNodeInstance::emptyBuffer function in omx/OMXNodeInstance.cpp in libstagefright in Android before 5.1.1 LMY48I allows attackers to execute arbitrary code via a crafted application, aka internal bug 20634516...