CVE-2015-1539: Critical severity android vulnerability
Published Oct 1, 2015
·Updated
Multiple integer underflows in the ESDS::parseESDescriptor function in ESDS.cpp in libstagefright in Android before 5.1.1 LMY48I allow remote attackers to execute arbitrary code via crafted ESDS atoms, aka internal bug 20139950, a related issue to CVE-2015-4493.
Affected Software
1 affected component
Google Android<=5.1
Event History
Oct 1, 2015
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-1539?
CVE-2015-1539 is considered a high-severity vulnerability due to the potential for remote code execution.
2
What versions of Android are affected by CVE-2015-1539?
CVE-2015-1539 affects Android versions prior to 5.1.1 LMY48I.
3
How do I mitigate CVE-2015-1539?
To mitigate CVE-2015-1539, users should update their Android operating system to version 5.1.1 or later.
4
Can CVE-2015-1539 be exploited remotely?
Yes, CVE-2015-1539 can be exploited remotely via crafted ESDS atoms sent to the affected device.
5
What kind of attacks are possible with CVE-2015-1539?
CVE-2015-1539 allows attackers to execute arbitrary code, leading to potential system compromise.