K3Vinlusec

A heap-based buffer overflow exists in Windows Media that could allow an unauthorized attacker to execute code locally. Remote attackers may be able to execute arbitrary code and affect the system.

The issue is related to the ih264d decoder in the mediaserver of Android, which mishandles slice numbers. This allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.