mediaserver vulnerabilities

CVE-2017-0541 is a remote code execution vulnerability in Mediaserver that can lead to memory corruption during media file processing. An attacker can exploit this issue using a specially crafted file.

A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.

A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.

A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.

A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.

A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.

A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.

A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.

A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.

A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.

CVE-2017-0415 is a privilege escalation vulnerability in Mediaserver that allows a local malicious application to execute arbitrary code within the context of a privileged process. This issue affects Android versions 6.0, 6.0.1, 7.0, and 7.1.1.

A vulnerability in Mediaserver allows a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities that are not normally accessible to third-party applications.

CVE-2016-6717 is a vulnerability in Mediaserver on Android versions before 4.4.4, 5.0.2, 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01, allowing a local malicious application to gain elevated privileges and execute arbitrary code within a privileged process context. However, it requires prior exploitation of another vulnerability.

A vulnerability in Mediaserver in Android allows a local malicious application to execute arbitrary code within the context of a privileged process. This affects Android versions 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01.

There is an elevation of privilege vulnerability in Mediaserver in Android versions 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01. A local malicious application could execute arbitrary code within the context of a privileged process.

A vulnerability in mediaserver in Android before 2016-10-05 on Nexus 9 and Pixel C devices allows attackers to gain privileges via a crafted application.

A vulnerability in mediaserver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application.

A vulnerability in mediaserver in Android before 2016-08-05 on Nexus 9 and Pixel C devices allows attackers to gain privileges via a crafted application.

In the mediaserver component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before July 1, 2016, the number of partitions is not validated, allowing remote attackers to cause a denial of service (device hang or reboot) via a crafted media file.

In Android versions 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01, the mediaserver component does not limit process memory usage. This allows remote attackers to cause a denial of service via a crafted media file.

The vulnerability in mediaserver in Android 4.x before 4.4.4 allows remote attackers to obtain sensitive information via unspecified vectors.

In Android versions 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01, the mediaserver component does not validate OMX buffer sizes. This allows attackers to gain privileges via a crafted application.

An unspecified media codec in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.

The vulnerability in mediaserver in Android 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.

Android versions before 5.1.1 LMY48Z and 6.0 before 2015-12-01 contain a vulnerability in the mediaserver component that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted media file.

The vulnerability in mediaserver in Android before version 5.1.1 LMY48Z allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.

A vulnerability in mediaserver in Android before version 5.1.1 LMY48Z and 6.0 before December 1, 2015, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.

A vulnerability in mediaserver in Android 4.4 and 5.1 before version 5.1.1 LMY48X allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.

A vulnerability in mediaserver in Android 4.4 through 5.x before version 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.

Versions of Android 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 contain a vulnerability in mediaserver that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted media file.

In Android 5.x before version 5.1.1 LMY48T and 6.0 before October 1, 2015, the mediaserver component allows attackers to gain privileges via a crafted application.

The vulnerability in mediaserver in Android before version 5.1.1 LMY48T allows attackers to gain privileges via a crafted application.

Android versions from 4.0.3 to 5.x before 5.1 contain a vulnerability in the mediaserver component that allows attackers to gain privileges.

A vulnerability in mediaserver in Android versions 2.2 through 5.x before 5.1 allows attackers to gain privileges.

Multiple buffer overflows in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attackers to gain privileges via a crafted application that provides an AudioEffect reply.

The decoder/ih264d_api.c in mediaserver in Android 6.x before 2016-07-01 does not initialize certain data structures, allowing remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.

The decoder/ih264d_process_intra_mb.c file in mediaserver in Android 6.x before 2016-07-01 mishandles intra mode, allowing remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.

A vulnerability in mediaserver in Android 6.x before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.

A vulnerability in mediaserver in Android 5.x before version 5.1.1 LMY49F and 6.0 before January 1, 2016, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.