DoS RCE, Android Media Framework, CVE-2019-2107

[tabac]

CVE-2019-2107 : a.k.a "Hevcfright" Proof of Concept exploit (Denial of Service PoC)

CVE-2019-2107 - looks scary. Still remember Stagefright and PNG bugs vulns .... With CVE-2019-2107 the decoder/codec runs under mediacodec user and with properly "crafted" video (with tiles enabled - ps_pps->i1_tiles_enabled_flag) you can possibly do RCE. The codec affected is HVEC (a.k.a H.265 and MPEG-H Part 2)

GitHub - marcinguy/CVE-2019-2107: CVE-2019-2107

CVE-2019-2107. Contribute to marcinguy/CVE-2019-2107 development by creating an account on GitHub.

github.com

 

[bash]

anti-malware.ru/news/2019-07-29-1447/30297

 

[ColorS]

бро напиши инструкцию как его применять, ото как то не понятно написано в гите , ставлю симпу