CVE-2016-2487
- EPSS 0.07%
- Veröffentlicht 13.06.2016 01:59:26
- Zuletzt bearbeitet 12.04.2025 10:46:40
libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem ac...
CVE-2016-2486
- EPSS 0.04%
- Veröffentlicht 13.06.2016 01:59:25
- Zuletzt bearbeitet 12.04.2025 10:46:40
mp3dec/SoftMP3.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate the relationship between allocated memory and the frame size, which allows attackers ...
CVE-2016-2485
- EPSS 0.04%
- Veröffentlicht 13.06.2016 01:59:24
- Zuletzt bearbeitet 12.04.2025 10:46:40
libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX buffer sizes for the GSM and G711 codecs, which allows attackers to gain privileges via a crafted appli...
CVE-2016-2484
- EPSS 0.04%
- Veröffentlicht 13.06.2016 01:59:23
- Zuletzt bearbeitet 12.04.2025 10:46:40
libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate OMX buffer sizes for the GSM and G711 codecs, which allows attackers to gain privileges via a crafted appli...
CVE-2016-2483
- EPSS 0.04%
- Veröffentlicht 13.06.2016 01:59:22
- Zuletzt bearbeitet 12.04.2025 10:46:40
The mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count, which allows attackers to gain privileges via a crafted application, as demonstr...
CVE-2016-2482
- EPSS 0.04%
- Veröffentlicht 13.06.2016 01:59:21
- Zuletzt bearbeitet 12.04.2025 10:46:40
The mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count, which allows attackers to gain privileges via a crafted application, as demonstr...
CVE-2016-2481
- EPSS 0.04%
- Veröffentlicht 13.06.2016 01:59:20
- Zuletzt bearbeitet 12.04.2025 10:46:40
The mm-video-v4l2 venc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count, which allows attackers to gain privileges via a crafted application, as demonstr...
CVE-2016-2480
- EPSS 0.04%
- Veröffentlicht 13.06.2016 01:59:19
- Zuletzt bearbeitet 12.04.2025 10:46:40
The mm-video-v4l2 vidc component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 does not validate certain OMX parameter data structures, which allows attackers to gain privileges via a cr...
CVE-2016-2479
- EPSS 0.04%
- Veröffentlicht 13.06.2016 01:59:18
- Zuletzt bearbeitet 12.04.2025 10:46:40
The mm-video-v4l2 vdec component in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles a buffer count, which allows attackers to gain privileges via a crafted application, as demonstr...
CVE-2016-2478
- EPSS 0.04%
- Veröffentlicht 13.06.2016 01:59:17
- Zuletzt bearbeitet 12.04.2025 10:46:40
mm-video-v4l2/vidc/vdec/src/omx_vdec_msm8974.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles pointers, which allows attackers to gain privileges via a crafted application, a...