CVE-2015-1538: Integer Overflow
Published Oct 1, 2015
·Updated
Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code via crafted atoms in MP4 data that trigger an unchecked multiplication, aka internal bug 20139950, a related issue to CVE-2015-4496.
Affected Software
1 affected component
Google Android<=5.1
Event History
Oct 1, 2015
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-1538?
CVE-2015-1538 has a high severity rating due to its potential to allow remote code execution.
2
How can I fix CVE-2015-1538?
To fix CVE-2015-1538, upgrade your Android system to version 5.1.1 or later.
3
What impact does CVE-2015-1538 have on affected systems?
CVE-2015-1538 can lead to arbitrary code execution on affected Android devices, compromising security.
4
Which versions of Android are affected by CVE-2015-1538?
CVE-2015-1538 affects Android versions before 5.1.1 LMY48I.
5
Is remote exploitation possible with CVE-2015-1538?
Yes, CVE-2015-1538 can be exploited remotely using crafted MP4 files.