CVE-2015-1538: Integer Overflow
First published: Thu Oct 01 2015(Updated: )
Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code via crafted atoms in MP4 data that trigger an unchecked multiplication, aka internal bug 20139950, a related issue to CVE-2015-4496.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Android | <=5.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/134131/Libstagefright-Integer-Overflow-Check-Bypass.html
- http://www.huawei.com/en/psirt/security-advisories/hw-448928
- http://www.securityfocus.com/bid/76052
- http://www.securitytracker.com/id/1033094
- http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-448928.htm
- https://android.googlesource.com/platform/frameworks/av/+/2434839bbd168469f80dd9a22f1328bc81046398
- https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ
- https://www.exploit-db.com/exploits/38124/
Frequently Asked Questions
What is the severity of CVE-2015-1538?
CVE-2015-1538 has a high severity rating due to its potential to allow remote code execution.
How can I fix CVE-2015-1538?
To fix CVE-2015-1538, upgrade your Android system to version 5.1.1 or later.
What impact does CVE-2015-1538 have on affected systems?
CVE-2015-1538 can lead to arbitrary code execution on affected Android devices, compromising security.
Which versions of Android are affected by CVE-2015-1538?
CVE-2015-1538 affects Android versions before 5.1.1 LMY48I.
Is remote exploitation possible with CVE-2015-1538?
Yes, CVE-2015-1538 can be exploited remotely using crafted MP4 files.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/author
- agent/event
- agent/first-publish-date
- agent/description
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/google
- canonical/android
- version/android/5.1