CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 2CVE-2015-1528
https://notcve.org/view.php?id=CVE-2015-1528
01 Oct 2015 — Integer overflow in the native_handle_create function in libcutils/native_handle.c in Android before 5.1.1 LMY48M allows attackers to obtain a different application's privileges or cause a denial of service (Binder heap memory corruption) via a crafted application, aka internal bug 19334482. Desbordamiento de entero en la función native_handle_create en libcutils/native_handle.c en Android en versiones anteriores a 5.1.1 LMY48M, permite a atacantes obtener privilegios de una aplicación diferente o provocar ... • https://github.com/secmob/PoCForCVE-2015-1528 • CWE-189: Numeric Errors •
CVSS: 10.0EPSS: 18%CPEs: 1EXPL: 0CVE-2015-3824
https://notcve.org/view.php?id=CVE-2015-3824
01 Oct 2015 — The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly restrict size addition, which allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow and memory corruption) via a crafted MPEG-4 tx3g atom, aka internal bug 20923261. La función MPEG4Extractor::parseChunk en MPEG4Extractor.cpp en libstagefright en Android en versiones anteriores a 5.1.1 LMY48I no restringe adecuadamente el tamaño de la sum... • http://www.huawei.com/en/psirt/security-advisories/hw-448928 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0CVE-2015-3844
https://notcve.org/view.php?id=CVE-2015-3844
01 Oct 2015 — The getProcessRecordLocked method in services/core/java/com/android/server/am/ActivityManagerService.java in ActivityManager in Android before 5.1.1 LMY48I allows attackers to trigger incorrect process loading via a crafted application, as demonstrated by interfering with use of the Settings application, aka internal bug 21669445. El método getProcessRecordLocked en services/core/java/com/android/server/am/ActivityManagerService.java en ActivityManager en Android en versiones anteriores a 5.1.1 LMY48I permi... • https://android.googlesource.com/platform/frameworks/base/+/e3cde784e3d99966f313fe00dcecf191f6a44a31 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 10.0EPSS: 26%CPEs: 1EXPL: 0CVE-2015-3829
https://notcve.org/view.php?id=CVE-2015-3829
01 Oct 2015 — Off-by-one error in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow and memory corruption) via crafted MPEG-4 covr atoms with a size equal to SIZE_MAX, aka internal bug 20923261. Error por un paso en la función MPEG4Extractor::parseChunk en MPEG4Extractor.cpp en libstagefright en Android en versiones anteriores a 5.1.1 LMY48I, permite a atacantes rem... • http://www.huawei.com/en/psirt/security-advisories/hw-448928 • CWE-189: Numeric Errors •
CVSS: 10.0EPSS: 24%CPEs: 1EXPL: 0CVE-2015-3828
https://notcve.org/view.php?id=CVE-2015-3828
01 Oct 2015 — The MPEG4Extractor::parse3GPPMetaData function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not enforce a minimum size for UTF-16 strings containing a Byte Order Mark (BOM), which allows remote attackers to execute arbitrary code or cause a denial of service (integer underflow and memory corruption) via crafted 3GPP metadata, aka internal bug 20923261, a related issue to CVE-2015-3826. La función MPEG4Extractor::parse3GPPMetaData en MPEG4Extractor.cpp en libstagefright en Andr... • http://www.huawei.com/en/psirt/security-advisories/hw-448928 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-189: Numeric Errors •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2015-3834
https://notcve.org/view.php?id=CVE-2015-3834
01 Oct 2015 — Multiple integer overflows in the BnHDCP::onTransact function in media/libmedia/IHDCP.cpp in libstagefright in Android before 5.1.1 LMY48I allow attackers to execute arbitrary code via a crafted application that uses HDCP encryption, leading to a heap-based buffer overflow, aka internal bug 20222489. Múltiples desbordamientos de entero en la función BnHDCP::onTransact en media/libmedia/IHDCP.cpp en libstagefright en Android en versiones anteriores a 5.1.1 LMY48I permiten a atacantes remotos ejecutar código ... • https://android.googlesource.com/platform/frameworks/av/+/c82e31a7039a03dca7b37c65b7890ba5c1e18ced • CWE-189: Numeric Errors •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2015-3849
https://notcve.org/view.php?id=CVE-2015-3849
01 Oct 2015 — The Region_createFromParcel function in core/jni/android/graphics/Region.cpp in Region in Android before 5.1.1 LMY48M does not check the return values of certain read operations, which allows attackers to execute arbitrary code via an application that sends a crafted message to a service, aka internal bug 21585255. La función Region_createFromParcel en core/jni/android/graphics/Region.cpp en Region en Android en versiones anteriores a 5.1.1 LMY48M no comprueba los valores de retorno de ciertas operaciones d... • https://android.googlesource.com/platform/frameworks/base/+/1e72dc7a3074cd0b44d89afbf39bbf5000ef7cc3 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2015-3842
https://notcve.org/view.php?id=CVE-2015-3842
01 Oct 2015 — Multiple heap-based buffer overflows in libeffects in the Audio Policy Service in mediaserver in Android before 5.1.1 LMY48I allow attackers to execute arbitrary code via a crafted application, aka internal bug 21953516. Múltiples desbordamientos de entero en libeffects en el Audio Policy Service en mediaserver en Android en versiones anteriores a 5.1.1 LMY48I permiten a atacantes ejecutar código arbitrario a través de una aplicación manipulada, también conocido como error interno 21953516. • https://android.googlesource.com/platform/frameworks/av/+/aeea52da00d210587fb3ed895de3d5f2e0264c88 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2015-3831
https://notcve.org/view.php?id=CVE-2015-3831
01 Oct 2015 — Buffer overflow in the readAt function in BpMediaHTTPConnection in media/libmedia/IMediaHTTPConnection.cpp in the mediaserver service in Android before 5.1.1 LMY48I allows attackers to execute arbitrary code via a crafted application, aka internal bug 19400722. Desbordamiento de buffer en la función readAt en BpMediaHTTPConnection en media/libmedia/IMediaHTTPConnection.cpp en el servicio mediaserver en Android en versiones anteriores a 5.1.1 LMY48I permite a atacantes ejecutar código arbitrario a través de ... • https://android.googlesource.com/platform/frameworks/av/+/51504928746edff6c94a1c498cf99c0a83bedaed • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.1EPSS: 0%CPEs: 1EXPL: 0CVE-2015-3833
https://notcve.org/view.php?id=CVE-2015-3833
01 Oct 2015 — The getRunningAppProcesses function in services/core/java/com/android/server/am/ActivityManagerService.java in Android before 5.1.1 LMY48I allows attackers to bypass intended getRecentTasks restrictions and discover the name of the foreground application via a crafted application, aka internal bug 20034603. La función getRunningAppProcesses en services/core/java/com/android/server/am/ActivityManagerService.java en Android en versiones anteriores a 5.1.1 LMY48I permite a atacantes eludir las restricciones de... • http://stackoverflow.com/questions/24625936/getrunningtasks-doesnt-work-in-android-l • CWE-284: Improper Access Control •