AndroidVulnerabilities.org

Mediaserver code execution

(json)

• CVE numbers: CVE-2014-7920 [mediaserver-blog][archived], CVE-2014-7921 [mediaserver-blog][archived]
• Coordinated disclosure?: true
• Categories: kernel, system
• Details: Two vulnerabilities which allow arbitrary code execution in the mediaserver process [mediaserver-blog][archived]
• Discovered by: Gal Beniamini (laginimaineb) [mediaserver-blog][archived] on: Unknown
• Reported on: 2014-10-14 [mediaserver-blog][archived]
• Fixed on: 2014-10-28 [mediaserver-commit]
• Fix released on: 2014-12-04 [mediaserver-commit]
• Affected versions: 2.2 to 5.0 [mediaserver-blog][archived] regex: (2.[2-9].[0-9])|([3-4].[0-9].[0-9])|(5.0.[0-9])
• Affected devices: all [mediaserver-blog][archived]
• Affected manufacturers: all [mediaserver-blog][archived]
• Fixed versions: 5.1 [mediaserver-blog][archived]
• Submission: by: Daniel Carter, on: 2019-07-09