CVE-2015-1538

Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code via crafted atoms in MP4 data that trigger an unchecked multiplication, aka internal bug 20139950, a related issue to CVE-2015-4496.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

99.06% chance of exploitation in the next 30 days, 100th percentile

Published

2015-10-01

Updated

2024-08-06

Proof-of-concept exploits (7)

• Tharana/Android-vulnerability-exploitation1★ · 2020-05-11
• Tharana/vulnerability-exploitation3★ · 2020-05-12
• jduck/cve-2015-1538-1205★ · 2015-09-10
• niranjanshr13/Stagefright-cve-2015-1538-10★ · 2016-03-20
• oguzhantopgul/cve-2015-1538-13★ · 2015-09-02
• renjithsasidharan/cve-2015-1538-11★ · 2015-09-10
• xsleaksiki/cve

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/38124

References

• CVE Record
• NVD entry

Related

• CVE-2019-13272
• CVE-2019-14287
• CVE-2016-5696
• CVE-2015-1528
• CVE-2015-1560
• CVE-2015-1518