CVE-2015-3867

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 23213430...

PT-2015-2195

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to a buffer overflow in the dynamic memory of the libstagefright library, caused by an integer overflow. This can be exploited by a remote attacker using a specially...

PT-2015-2204

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48M Description The issue is caused by an integer underflow in the MPEG4Extractor::parseChunk function in the libstagefright library of the Android operating system. This allows a remote attacker to execute...

PT-2015-2217

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48I libstagefright affected versions not specified Description The issue is caused by multiple integer overflows in the BnHDCP::onTransact function of the libstagefright library in the Android operating syste...

PT-2015-2216

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48I Description The issue is caused by a buffer overflow in the OMXNodeInstance::emptyBuffer function in libstagefright. This allows attackers to execute arbitrary code via a crafted application...

PT-2015-3049

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.0.0 Description The issue is caused by an integer overflow in the SampleTable.cpp file of the libstagefright component in the Android operating system. This can be exploited by a remote attacker to compromise the...

PT-2015-3048

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.0.0 Description The issue is caused by an integer overflow in the SampleTable.cpp file of the libstagefright component in the Android operating system. This can be exploited by a remote attacker to compromise the...

PT-2015-3050

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.0.0 Description The issue is caused by an integer overflow in the SampleTable.cpp file of the libstagefright component. This can potentially allow a remote attacker to compromise the confidentiality, integrity, and...

PT-2015-2206

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48M Description The issue is related to multiple integer overflows in the addVorbisCodecInfo function in matroska/MatroskaExtractor.cpp in libstagefright in mediaserver. This allows remote attackers to cause ...

CVE-2015-3834

Multiple integer overflows in the BnHDCP::onTransact function in media/libmedia/IHDCP.cpp in libstagefright in Android before 5.1.1 LMY48I allow attackers to execute arbitrary code via a crafted application that uses HDCP encryption, leading to a heap-based buffer overflow, aka internal bug...

CVE-2015-6575

SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly consider integer promotion, which allows remote attackers to execute arbitrary code or cause a denial of service integer overflow and memory corruption via crafted atoms in MP4 data, aka internal bug 20139950, a...

CVE-2014-7916

Integer overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified impact and attack vectors, aka internal bug 15342751...

CVE-2015-3864

Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted MPEG-4 data, aka internal bug 23034759. NOTE: this vulnerability exists because of an...

CVE-2015-3834

Technical details about CVE-2015-3834 are not publicly available in the provided connected documents. The initial entry describes the vulnerability but lacks corroborating specifics in the connected sources. Monitor for updates and new disclosures.

CVE-2015-3828

The MPEG4Extractor::parse3GPPMetaData function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not enforce a minimum size for UTF-16 strings containing a Byte Order Mark BOM, which allows remote attackers to execute arbitrary code or cause a denial of service integer...

CVE-2015-6598

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 23306638...

CVE-2015-3873

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bugs 23016072, 23248776, 23247055, 22845824, 22008959, 21814993, 21048776, 20718524, 20674674, 22388975, 20674086,...

CVE-2015-3876

libstagefright in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file...

CVE-2015-3861

Multiple integer overflows in the addVorbisCodecInfo function in matroska/MatroskaExtractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allow remote attackers to cause a denial of service device inoperability via crafted Matroska data, aka internal bug 21296336...

CVE-2015-3824

The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly restrict size addition, which allows remote attackers to execute arbitrary code or cause a denial of service integer overflow and memory corruption via a crafted MPEG-4...