CVE-2015-3864

Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted MPEG-4 data, aka internal bug 23034759. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3824.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

87.12% chance of exploitation in the next 30 days, 100th percentile

Published

2015-10-01

Updated

2024-08-06

Proof-of-concept exploits (6)

• Bhathiya404/Exploiting-Stagefright-Vulnerability-CVE-2015-38640★ · 2023-02-09
• Cmadhushanka/CVE-2015-3864-Exploitation0★ · 2024-07-10
• HenryVHuang/CVE-2015-38640★ · 2016-03-30
• HighW4y2H3ll/libstagefrightExploit2★ · 2016-04-22
• eudemonics/scaredycat17★ · 2015-12-08
• pwnaccelerator/stagefright-cve-2015-38643★ · 2015-08-18

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/android/browser/stagefright_mp4_…

ExploitDB entries (3)

• https://www.exploit-db.com/exploits/40436
• https://www.exploit-db.com/exploits/38226
• https://www.exploit-db.com/exploits/39640

References

• CVE Record
• NVD entry

Related

• CVE-2019-6447
• CVE-2023-32784
• CVE-2015-3840
• CVE-2015-3884
• CVE-2015-3839
• CVE-2015-3888