CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2015-3831
https://notcve.org/view.php?id=CVE-2015-3831
01 Oct 2015 — Buffer overflow in the readAt function in BpMediaHTTPConnection in media/libmedia/IMediaHTTPConnection.cpp in the mediaserver service in Android before 5.1.1 LMY48I allows attackers to execute arbitrary code via a crafted application, aka internal bug 19400722. Desbordamiento de buffer en la función readAt en BpMediaHTTPConnection en media/libmedia/IMediaHTTPConnection.cpp en el servicio mediaserver en Android en versiones anteriores a 5.1.1 LMY48I permite a atacantes ejecutar código arbitrario a través de ... • https://android.googlesource.com/platform/frameworks/av/+/51504928746edff6c94a1c498cf99c0a83bedaed • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 5%CPEs: 1EXPL: 0CVE-2015-3832
https://notcve.org/view.php?id=CVE-2015-3832
01 Oct 2015 — Multiple buffer overflows in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I allow remote attackers to execute arbitrary code via invalid size values of NAL units in MP4 data, aka internal bug 19641538. Múltiples desbordamientos de entero en MPEG4Extractor.cpp en libstagefright en Android en versiones anteriores a 5.1.1 LMY48I permiten a atacantes remotos ejecutar código arbitrario a través de valores de tamaño no válidos de unidades NAL en datos MP4, también conocido como error interno ... • https://android.googlesource.com/platform/frameworks/av/+/d48f0f145f8f0f4472bc0af668ac9a8bce44ba9b • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.1EPSS: 0%CPEs: 1EXPL: 0CVE-2015-3833
https://notcve.org/view.php?id=CVE-2015-3833
01 Oct 2015 — The getRunningAppProcesses function in services/core/java/com/android/server/am/ActivityManagerService.java in Android before 5.1.1 LMY48I allows attackers to bypass intended getRecentTasks restrictions and discover the name of the foreground application via a crafted application, aka internal bug 20034603. La función getRunningAppProcesses en services/core/java/com/android/server/am/ActivityManagerService.java en Android en versiones anteriores a 5.1.1 LMY48I permite a atacantes eludir las restricciones de... • http://stackoverflow.com/questions/24625936/getrunningtasks-doesnt-work-in-android-l • CWE-284: Improper Access Control •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2015-3834
https://notcve.org/view.php?id=CVE-2015-3834
01 Oct 2015 — Multiple integer overflows in the BnHDCP::onTransact function in media/libmedia/IHDCP.cpp in libstagefright in Android before 5.1.1 LMY48I allow attackers to execute arbitrary code via a crafted application that uses HDCP encryption, leading to a heap-based buffer overflow, aka internal bug 20222489. Múltiples desbordamientos de entero en la función BnHDCP::onTransact en media/libmedia/IHDCP.cpp en libstagefright en Android en versiones anteriores a 5.1.1 LMY48I permiten a atacantes remotos ejecutar código ... • https://android.googlesource.com/platform/frameworks/av/+/c82e31a7039a03dca7b37c65b7890ba5c1e18ced • CWE-189: Numeric Errors •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2015-3835
https://notcve.org/view.php?id=CVE-2015-3835
01 Oct 2015 — Buffer overflow in the OMXNodeInstance::emptyBuffer function in omx/OMXNodeInstance.cpp in libstagefright in Android before 5.1.1 LMY48I allows attackers to execute arbitrary code via a crafted application, aka internal bug 20634516. Desbordamiento de buffer en la función OMXNodeInstance::emptyBuffer en omx/OMXNodeInstance.cpp en libstagefright en Android en versiones anteriores a 5.1.1 LMY48I permite a atacantes ejecutar código arbitrario a través de una aplicación manipulada, también conocido como error i... • https://android.googlesource.com/platform/frameworks/av/+/086d84f45ab7b64d1a7ed7ac8ba5833664a6a5ab • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 3%CPEs: 1EXPL: 0CVE-2015-3836
https://notcve.org/view.php?id=CVE-2015-3836
01 Oct 2015 — The Parse_wave function in arm-wt-22k/lib_src/eas_mdls.c in the Sonivox DLS-to-EAS converter in Android before 5.1.1 LMY48I does not reject a negative value for a certain size field, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via crafted XMF data, aka internal bug 21132860. La función Parse_wave en arm-wt-22k/lib_src/eas_mdls.c en el convertidor Sonivox DLS-to-EAS en Android en versiones anteriores a 5.1.1 LMY48I no rechaza un valor negativo para u... • https://android.googlesource.com/platform/external/sonivox/+/e999f077f6ef59d20282f1e04786816a31fb8be6 • CWE-189: Numeric Errors •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 1CVE-2015-3837
https://notcve.org/view.php?id=CVE-2015-3837
01 Oct 2015 — The OpenSSLX509Certificate class in org/conscrypt/OpenSSLX509Certificate.java in Android before 5.1.1 LMY48I improperly includes certain context data during serialization and deserialization, which allows attackers to execute arbitrary code via an application that sends a crafted Intent, aka internal bug 21437603. La clase OpenSSLX509Certificate en org/conscrypt/OpenSSLX509Certificate.java en Android en versiones anteriores a 5.1.1 LMY48I incluye indebidamente determinados datos de contexto durante la seria... • https://github.com/itibs/IsildursBane • CWE-20: Improper Input Validation •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2015-3842
https://notcve.org/view.php?id=CVE-2015-3842
01 Oct 2015 — Multiple heap-based buffer overflows in libeffects in the Audio Policy Service in mediaserver in Android before 5.1.1 LMY48I allow attackers to execute arbitrary code via a crafted application, aka internal bug 21953516. Múltiples desbordamientos de entero en libeffects en el Audio Policy Service en mediaserver en Android en versiones anteriores a 5.1.1 LMY48I permiten a atacantes ejecutar código arbitrario a través de una aplicación manipulada, también conocido como error interno 21953516. • https://android.googlesource.com/platform/frameworks/av/+/aeea52da00d210587fb3ed895de3d5f2e0264c88 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2015-3843
https://notcve.org/view.php?id=CVE-2015-3843
01 Oct 2015 — The SIM Toolkit (STK) framework in Android before 5.1.1 LMY48I allows attackers to (1) intercept or (2) emulate unspecified Telephony STK SIM commands via an application that sends a crafted Intent, related to com/android/internal/telephony/cat/AppInterface.java, aka internal bug 21697171. El framework SIM Toolkit (STK) en Android en versiones anteriores a 5.1.1 LMY48I permite a atacantes (1) interceptar o (2) emular comandos Telephony STK SIM no especificados a través de una aplicación que envía un Intent ... • https://android.googlesource.com/platform/frameworks/base/+/a5e904e7eb3aaec532de83ca52e24af18e0496b4 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0CVE-2015-3844
https://notcve.org/view.php?id=CVE-2015-3844
01 Oct 2015 — The getProcessRecordLocked method in services/core/java/com/android/server/am/ActivityManagerService.java in ActivityManager in Android before 5.1.1 LMY48I allows attackers to trigger incorrect process loading via a crafted application, as demonstrated by interfering with use of the Settings application, aka internal bug 21669445. El método getProcessRecordLocked en services/core/java/com/android/server/am/ActivityManagerService.java en ActivityManager en Android en versiones anteriores a 5.1.1 LMY48I permi... • https://android.googlesource.com/platform/frameworks/base/+/e3cde784e3d99966f313fe00dcecf191f6a44a31 • CWE-264: Permissions, Privileges, and Access Controls •