Google Android Media Framework Component Multiple Security Vulnerabilities

Bugtraq ID:	105481
Class:	Unknown
CVE:	CVE-2018-9473 CVE-2018-9496 CVE-2018-9497 CVE-2018-9498 CVE-2018-9499
Remote:	Yes
Local:	No
Published:	Oct 01 2018 12:00AM
Updated:	Oct 01 2018 12:00AM
Credit:	Google
Vulnerable:	Google Pixel XL 0 Google Pixel C 0 Google Pixel 0 Google Nexus 9 Google Nexus 7 Google Nexus 6P Google Nexus 6 Google Nexus 5X Google Nexus 10 Google Android 7.1.1 Google Android 9.0 Google Android 8.1 Google Android 8.0 Google Android 7.1.2 Google Android 7.0
Not Vulnerable:

Google Android Media Framework Component Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Google Android Media Framework Component Multiple Security Vulnerabilities

References:

• Adding check for min_width and min_height (Google)
  
• Android Homepage (Google)
  
• Fix for stack corruption in esbr (Google)
  
• Fix information disclosure in mediadrmserver (Google)
  
• Fix overflow in sei user data parsing (Google)
  
• RESTRICT AUTOMERGE: Cherry-pick "begin cleanup of malloc porting layer" (Google)
  
• Android Security Bulletin�??October 2018 (Google)