Hao Qin

**Name of the Vulnerable Software and Affected Versions** Android versions 4.x through 4.4.3 Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-07-01 **Description** The issue is related to the MPEG4Extractor.cpp file in the libstagefright component of the Android mediaserver. It does not check whether memory allocation succeeds, which allows remote attackers to cause a denial of service, resulting in a device hang or reboot, via a crafted file. **Recommendations** For Android versions 4.x through 4.4.3, update to version 4.4.4 or later. For Android versions 5.0.x through 5.0.1, update to version 5.0.2 or later. For Android versions 5.1.x through 5.1.0, update to version 5.1.1 or later. For Android versions 6.x before 2016-07-01, update to a version released on or after 2016-07-01.

**Name of the Vulnerable Software and Affected Versions** Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-07-01 **Description** The issue allows local users to gain privileges by establishing a Bluetooth pairing that remains present during a session of the primary user. This is due to insufficient input validation in the Bluetooth component of the Android operating system. An attacker can exploit this issue to elevate their privileges by connecting devices via Bluetooth while the primary user is active. **Recommendations** For Android versions 5.0.x through 5.0.1, update to version 5.0.2 or later. For Android versions 5.1.x through 5.1.0, update to version 5.1.1 or later. For Android versions 6.x before 2016-07-01, ensure that all updates up to at least 2016-07-01 are applied.