CVE-2015-3829: Integer Overflow
Off-by-one error in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow and memory corruption) via crafted MPEG-4 covr atoms with a size equal to SIZEMAX, aka internal bug 20923261.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-3829?
CVE-2015-3829 has a high severity due to its potential to allow remote code execution or denial of service.
How do I fix CVE-2015-3829?
To fix CVE-2015-3829, update the Android software to version 5.1.1 LMY48I or later.
What types of attacks can CVE-2015-3829 enable?
CVE-2015-3829 can enable remote attackers to execute arbitrary code and cause denial of service.
Which versions of Android are affected by CVE-2015-3829?
CVE-2015-3829 affects Android versions prior to 5.1.1 LMY48I.
What is the root cause of CVE-2015-3829?
The root cause of CVE-2015-3829 is an off-by-one error in the MPEG4Extractor::parseChunk function.