CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 0CVE-2016-0834
https://notcve.org/view.php?id=CVE-2016-0834
18 Apr 2016 — An unspecified media codec in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 26220548. Un códec multimedia no especificado en mediaserver en Android 6.x en versiones anteriores a 2016-04-01 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria) a través de un archivo multimedia manipulado, también conocido como... • http://nvidia.custhelp.com/app/answers/detail/a_id/4561 • CWE-20: Improper Input Validation •
CVSS: 10.0EPSS: 4%CPEs: 2EXPL: 0CVE-2016-0835
https://notcve.org/view.php?id=CVE-2016-0835
18 Apr 2016 — decoder/impeg2d_dec_hdr.c in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file that triggers a certain negative value, aka internal bug 26070014. decoder/impeg2d_dec_hdr.c en mediaserver en Android 6.x en versiones anteriores a 2016-04-01 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria) a través de un archivo multimedia manip... • http://source.android.com/security/bulletin/2016-04-02.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 0CVE-2016-0836
https://notcve.org/view.php?id=CVE-2016-0836
18 Apr 2016 — Stack-based buffer overflow in decoder/impeg2d_vld.c in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 25812590. Desbordamiento de buffer basado en pila en decoder/impeg2d_vld.c en mediaserver en Android 6.x en versiones anteriores a 2016-04-01 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio (corrupción de memoria) a través de ... • http://source.android.com/security/bulletin/2016-04-02.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 2%CPEs: 22EXPL: 0CVE-2016-0837
https://notcve.org/view.php?id=CVE-2016-0837
18 Apr 2016 — MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read and memory corruption) via a crafted media file, aka internal bug 27208621. MPEG4Extractor.cpp en libstagefright en mediaserver en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en vers... • http://source.android.com/security/bulletin/2016-04-02.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 4%CPEs: 22EXPL: 0CVE-2016-0838
https://notcve.org/view.php?id=CVE-2016-0838
18 Apr 2016 — Sonivox in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not check for a negative number of samples, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, related to arm-wt-22k/lib_src/eas_wtengine.c and arm-wt-22k/lib_src/eas_wtsynth.c, aka internal bug 26366256. Sonivox en mediaserver en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5... • http://source.android.com/security/bulletin/2016-04-02.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 2%CPEs: 2EXPL: 0CVE-2016-0839
https://notcve.org/view.php?id=CVE-2016-0839
18 Apr 2016 — post_proc/volume_listener.c in mediaserver in Android 6.x before 2016-04-01 mishandles deleted effect context, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 25753245. post_proc/volume_listener.c en mediaserver en Android 6.x en versiones anteriores a 2016-04-01 no maneja correctamente el contexto de efecto borrado, lo que permite a atacantes remotos ejecutar código arbitrario o causar una denegación de serv... • http://source.android.com/security/bulletin/2016-04-02.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 1%CPEs: 2EXPL: 0CVE-2016-0840
https://notcve.org/view.php?id=CVE-2016-0840
18 Apr 2016 — Multiple stack-based buffer underflows in decoder/ih264d_parse_cavlc.c in mediaserver in Android 6.x before 2016-04-01 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 26399350. Múltiples desbordamientos inferiores de buffer basado en pila en decoder/ih264d_parse_cavlc.c en mediaserver en Android 6.x en versiones anteriores a 2016-04-01 permiten a atacantes remotos ejecutar código arbitrario o causar una denegación d... • http://source.android.com/security/bulletin/2016-04-02.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 2%CPEs: 22EXPL: 0CVE-2016-0841
https://notcve.org/view.php?id=CVE-2016-0841
18 Apr 2016 — media/libmedia/mediametadataretriever.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 mishandles cleared service binders, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 26040840. media/libmedia/mediametadataretriever.cpp en mediaserver en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones ant... • http://source.android.com/security/bulletin/2016-04-02.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 1%CPEs: 2EXPL: 0CVE-2016-0842
https://notcve.org/view.php?id=CVE-2016-0842
18 Apr 2016 — The H.264 decoder in libstagefright in Android 6.x before 2016-04-01 mishandles Memory Management Control Operation (MMCO) data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 25818142. El decodificador H.264 en libstagefright en Android 6.x en versiones anteriores a 2016-04-01 no maneja correctamente los datos Memory Management Control Operation (MMCO), lo que permite a atacantes remotos ejecutar código arb... • http://source.android.com/security/bulletin/2016-04-02.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 8.4EPSS: 0%CPEs: 22EXPL: 0CVE-2016-0843
https://notcve.org/view.php?id=CVE-2016-0843
18 Apr 2016 — The Qualcomm ARM processor performance-event manager in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows attackers to gain privileges via a crafted application, aka internal bug 25801197. El administrador del rendimiento de eventos del procesador Qualcomm ARM en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 2016-04-01 permite a atacantes obtener privil... • http://source.android.com/security/bulletin/2016-04-02.html • CWE-264: Permissions, Privileges, and Access Controls •