Google Android up to 4.4.3/5.0.1/5.1.0/6.x Mediaserver omx_vdec_msm8974.cpp input validation

Summaryinfo

A vulnerability was found in Google Android up to 4.4.3/5.0.1/5.1.0/6.x. It has been rated as problematic. Affected by this vulnerability is an unknown functionality of the file mm-video-v4l2/vidc/vdec/src/omx_vdec_msm8974.cpp of the component Mediaserver. The manipulation leads to input validation. This vulnerability is uniquely identified as CVE-2016-2478. No exploit exists. Upgrading the affected component is advised.

Detailsinfo

A vulnerability was found in Google Android up to 4.4.3/5.0.1/5.1.0/6.x (Smartphone Operating System). It has been rated as critical. This issue affects an unknown function of the file mm-video-v4l2/vidc/vdec/src/omx_vdec_msm8974.cpp of the component Mediaserver. The manipulation with an unknown input leads to a input validation vulnerability. Using CWE to declare the problem leads to CWE-20. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

mm-video-v4l2/vidc/vdec/src/omx_vdec_msm8974.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-06-01 mishandles pointers, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 27475409.

The weakness was disclosed 06/13/2016 (Website). The advisory is shared at android.googlesource.com. The identification of this vulnerability is CVE-2016-2478 since 02/18/2016. An attack has to be approached locally. The successful exploitation requires a simple authentication. Technical details are known, but no exploit is available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 01/18/2019). It is expected to see the exploit prices for this product increasing in the near future.

Upgrading to version 4.4.4, 5.0.2, 5.1.1 or 6.x 2016-06-01 eliminates this vulnerability.

The entries VDB-87840, VDB-87841, VDB-87842 and VDB-87843 are pretty similar. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Smartphone Operating System

Vendor

• Google

Name

• Android

Version

• 1.0
• 1.1
• 1.5
• 1.6
• 2.0
• 2.0.1
• 2.1
• 2.2
• 2.2.1
• 2.2.2
• 2.2.3
• 2.3
• 2.3.1
• 2.3.2
• 2.3.3
• 2.3.4
• 2.3.5
• 2.3.6
• 2.3.7
• 3.0
• 3.1
• 3.2
• 3.2.1
• 3.2.2
• 3.2.3
• 3.2.4
• 3.2.5
• 3.2.6
• 4.0
• 4.0.1
• 4.0.2
• 4.0.3
• 4.0.4
• 4.1
• 4.1.1
• 4.1.2
• 4.2
• 4.2.1
• 4.2.2
• 4.3
• 4.3.1
• 4.4
• 4.4.1
• 4.4.2
• 4.4.3
• 4.4.4
• 5.0
• 5.0.1
• 5.1.0
• 6.x

License

• free

Website

• Vendor: https://www.google.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion