CVEvulnerability
CVE-2015-1538
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-10-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code via crafted atoms in MP4 data that trigger an unchecked multiplication, aka internal bug 20139950, a related issue to CVE-2015-4496.
Affected configurations
• google android (<= 5.1)
Related
Weakness · not in database (1)
References
- http://packetstormsecurity.com/files/134131/Libstagefright-Integer-Overflow-Check-Bypass.html packetstormsecurity.com
- http://www.huawei.com/en/psirt/security-advisories/hw-448928 www.huawei.com
- http://www.securityfocus.com/bid/76052 www.securityfocus.com
- http://www.securitytracker.com/id/1033094 www.securitytracker.com
- http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-448928.htm www1.huawei.com
- https://android.googlesource.com/platform/frameworks/av/+/2434839bbd168469f80dd9a22f1328bc81046398 Vendor Advisory
- https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ Vendor Advisory
- https://www.exploit-db.com/exploits/38124/ www.exploit-db.com
- http://packetstormsecurity.com/files/134131/Libstagefright-Integer-Overflow-Check-Bypass.html packetstormsecurity.com
- http://www.huawei.com/en/psirt/security-advisories/hw-448928 www.huawei.com
- http://www.securityfocus.com/bid/76052 www.securityfocus.com
- http://www.securitytracker.com/id/1033094 www.securitytracker.com
- http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-448928.htm www1.huawei.com
- https://android.googlesource.com/platform/frameworks/av/+/2434839bbd168469f80dd9a22f1328bc81046398 Vendor Advisory
- https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ Vendor Advisory
- https://www.exploit-db.com/exploits/38124/ www.exploit-db.com