CVE-2015-3861: Integer Overflow
Published Sep 9, 2015
·Updated
Multiple integer overflows in the addVorbisCodecInfo function in matroska/MatroskaExtractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allow remote attackers to cause a denial of service (device inoperability) via crafted Matroska data, aka internal bug 21296336.
Affected Software
2 affected components
Google Android<=5.1
Google Android
Event History
Sep 9, 2015
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityAffected Software
Oct 1, 2015
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
Which Android versions are affected?
Android versions before 5.1.1 build LMY48M are affected. The issue is in libstagefright's mediaserver component.
2
What must an attacker provide to trigger the issue?
An attacker needs to cause the device to process crafted Matroska media data. The vulnerable addVorbisCodecInfo function can then encounter integer overflows, causing a denial of service that may make the device inoperable.
3
Does exploitation require authentication or local access?
No. The reported vector is network-based, with low attack complexity and no authentication requirement.