Lucene search
+L

307 matches found

CNVD
CNVD
added 2018/04/11 12:00 a.m.5 views

Google Android Media framework(libavc) security vulnerability

Android on Google Pixel and Nexus is a Linux-based open source operating system for Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA, with the Media framework libavc as a framework for multimedia development. is a framework used for multimedia...

7.5CVSS6.8AI score0.00408EPSS
SaveExploits0References1
OSV
OSV
added 2018/02/05 4:29 a.m.8 views

UBUNTU-CVE-2018-6621

The decodeframe function in libavcodec/utvideodec.c in FFmpeg through 3.2 allows remote attackers to cause a denial of service out of array read via a crafted AVI file...

6.5CVSS7AI score0.02164EPSS
SaveExploits0References3
OSV
OSV
added 2018/01/12 11:29 p.m.6 views

CVE-2017-13186

A vulnerability in the Android media framework libavc related to incorrect use of mmco parameters. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-65735716...

7.5CVSS5.8AI score0.00507EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2017/08/25 12:00 a.m.9 views

Vulnerability in the Android operating system’s media framework (H263 decoder), allowing a perpetrator to execute arbitrary code

The vulnerability in the Android operating system’s media framework H263 decoder is related to deficiencies in access control. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9.3CVSS7.6AI score0.02653EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
added 2017/08/21 12:00 a.m.9 views

Google Android Media framework (libavc) Denial of Service Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. media framework libavc is one of the frameworks used for multimedia development. A denial of service vulnerability exists in Media framework libavc in Android. A remote attacker ca...

5.5CVSS5.7AI score0.00515EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/08/10 12:00 a.m.9 views

Android Media framework avc decoder remote code execution vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, and Media framework avc decoder is one of the avc decoders used for multimedia development. A remote code execution vulnerability exists in the Media framework avc decoder in...

9.3CVSS8.1AI score0.02653EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2017/03/16 12:00 a.m.9 views

The vulnerability of the Android operating system, which allows a malicious actor to compromise data privacy

The vulnerability of the MediaTek video codec driver for the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to compromise data confidentiality through a local malware application...

2.6CVSS5.5AI score0.00475EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2017/03/08 1:59 a.m.9 views

CVE-2017-0532

An information disclosure vulnerability in the MediaTek video codec driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A...

4.7CVSS7.3AI score0.00475EPSS
SaveExploits0References4
NVD
NVD
added 2017/03/08 1:59 a.m.19 views

CVE-2017-0532

An information disclosure vulnerability in the MediaTek video codec driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A...

4.7CVSS3.7AI score0.00475EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2017/03/08 1:59 a.m.34 views

CVE-2017-0532

An information disclosure vulnerability in the MediaTek video codec driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A...

4.7CVSS6.3AI score0.00475EPSS
SaveExploits0References2
Prion
Prion
added 2017/03/08 1:59 a.m.21 views

Information disclosure

An information disclosure vulnerability in the MediaTek video codec driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A...

2.6CVSS3.9AI score0.00475EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2017/03/08 1:59 a.m.8 views

UBUNTU-CVE-2017-0532

An information disclosure vulnerability in the MediaTek video codec driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: N/A...

4.7CVSS6.2AI score0.00475EPSS
SaveExploits0References3
CVE
CVE
added 2017/03/08 1:00 a.m.61 views

CVE-2017-0532

CVE-2017-0532 describes an information-disclosure vulnerability in the MediaTek video codec driver that could allow a local malicious Android app to access data outside its permission levels. The issue is considered moderate because exploitation requires compromising a privileged process. The rec...

4.7CVSS4.3AI score0.00475EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/02/21 12:00 a.m.9 views

The vulnerability of the Flash Player software, which allows a violator to execute arbitrary code

The vulnerability in the H.264 codec, related to the decompression process of the Flash Player software platform, arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code memory corruption remotely...

10CVSS8.2AI score0.08666EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2017/02/15 6:59 a.m.6 views

CVE-2017-2986

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the Flash Video FLV codec. Successful exploitation could lead to arbitrary code execution...

8.8CVSS6AI score0.30873EPSS
SaveExploits4References6
OSV
OSV
added 2017/02/15 6:59 a.m.8 views

UBUNTU-CVE-2017-2991

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 codec related to decompression. Successful exploitation could lead to arbitrary code execution...

9.8CVSS7.6AI score0.08666EPSS
SaveExploits0References3
OSV
OSV
added 2017/02/15 6:59 a.m.5 views

CVE-2017-2991

Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable memory corruption vulnerability in the h264 codec related to decompression. Successful exploitation could lead to arbitrary code execution...

8.8CVSS6AI score0.08666EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2017/02/15 12:00 a.m.6 views

PT-2017-1249 · Adobe +3 · Flash Player +3

Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions 24.0.0.194 and earlier Description: The issue is related to a heap overflow vulnerability in the Flash Video FLV codec. This vulnerability could be exploited to achieve arbitrary code execution. The vulnerability i...

10CVSS9.3AI score0.32676EPSS
SaveExploits14References74
OSV
OSV
added 2016/08/05 8:59 p.m.7 views

CVE-2016-3829

The ih264d decoder in mediaserver in Android 6.x before 2016-08-01 does not initialize certain structure members, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 29023649...

5.5CVSS7.3AI score0.01068EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2016/08/03 12:00 a.m.14 views

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information

The vulnerability of MediaTek’s Android video codec relates to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain confidential information through a specially created application...

4.3CVSS6.3AI score0.00449EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder