CVE-2015-3874: Buffer Overflow
Published Oct 6, 2015
·Updated
The Sonivox components in Android before 5.1.1 LMY48T allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bugs 23335715, 23307276, and 23286323.
Affected Software
1 affected component
Google Android<=5.1
Event History
Oct 6, 2015
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-3874?
CVE-2015-3874 is rated as high severity due to its potential for remote code execution and denial of service.
2
How do I fix CVE-2015-3874?
To fix CVE-2015-3874, update your Android device to version 5.1.1 LMY48T or later.
3
What versions of Android are affected by CVE-2015-3874?
CVE-2015-3874 affects all Android versions prior to 5.1.1 LMY48T.
4
What types of attacks are possible with CVE-2015-3874?
CVE-2015-3874 allows remote attackers to execute arbitrary code or cause denial of service through crafted media files.
5
What components of Android does CVE-2015-3874 involve?
CVE-2015-3874 involves vulnerabilities in the Sonivox components of Android.