CVE-2015-3867

CVE-2015-3867 is a vulnerability in Android’s libstagefright prior to 5.1.1 LMY48T where processing a specially crafted media file can cause memory corruption and remote code execution in the mediaserver service. The root cause is tied to libstagefright’s handling of media data, enabling an attac...

CVE-2015-3871

CVE-2015-3871 affects libstagefright in Android prior to 5.1.1 LMY48T. A crafted media file could trigger memory corruption in mediaserver/libstagefright, enabling remote code execution or a denial of service. The Android Security Bulletin notes that builds LMY48T or later address these issues, a...

CVE-2015-6600

CVE-2015-6600 affects Android’s media stack: libstagefright vulnerable on Android versions before 5.1.1 LMY48T due to a memory-corruption flaw when processing crafted media files, enabling remote code execution or a denial of service in mediaserver. Root cause referenced as internal bug 22882938....

CVE-2015-6598

CVE-2015-6598 affects Android’s libstagefright (before 5.1.1 LMY48T). The issue is memory corruption in media processing, which could enable remote code execution or a denial of service when handling a crafted media file, potentially via mediaserver. Root cause centers on memory corruption within...

CVE-2015-6599

CVE-2015-6599 affects libstagefright in Android prior to 5.1.1 LMY48T. A crafted media file can cause memory corruption in mediaserver, enabling remote code execution or a denial of service. The Android Nexus bulletin notes patches for builds after LMY48T (5.1.1+) and advises updating to at least...

CVE-2015-6601

CVE-2015-6601 affects libstagefright in Android up to version 5.1.1 LMY48T. A crafted media file could cause memory corruption in mediaserver, allowing remote code execution or a denial of service. The issue is addressed by patches in Android 5.1.1 (LMY48T) and later via the October 2015 Nexus/An...

CVE-2015-3870

CVE-2015-3870 affects Android’s libstagefright prior to 5.1.1 LMY48T. In these builds, processing a specially crafted media file could allow a remote attacker to execute arbitrary code or cause a denial of service via memory corruption in the mediaserver. The vulnerability stems from libstagefrig...

Google Patches Stagefright 2.0 in Android OTA Nexus Update

Google today patched the latest round of Stagefright vulnerabilities in Android, pushing them out as part of its latest over-the-air update to Nexus devices. Stagefright 2.0, as it’s come to be known, affected the Stagefright media playback engine in Android and one billion devices dating back to...

DEBIAN-CVE-2015-6602

libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file, as demonstrated by an attack against use of libutils by libstagefright in Android 5.x...

CVE-2015-6602

libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file, as demonstrated by an attack against use of libutils by libstagefright in Android 5.x...

CVE-2015-3876

libstagefright in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file...

CVE-2015-6602

libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file, as demonstrated by an attack against use of libutils by libstagefright in Android 5.x...

Design/Logic Flaw

libstagefright in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file...

CVE-2015-3876

libstagefright in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file...

Input validation

libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file, as demonstrated by an attack against use of libutils by libstagefright in Android 5.x...

CVE-2015-6602

libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file, as demonstrated by an attack against use of libutils by libstagefright in Android 5.x...

CVE-2015-3876

libstagefright in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a 1 MP3 or 2 MP4 file...

CVE-2015-3876

CVE-2015-3876 is a vulnerability in Android's Stagefright libstagefright that could allow remote code execution by processing crafted MP3/MP4 media files. The Android bulletin documents this as part of a set of remote‑code‑execution issues in libstagefright, with affected versions including Andro...

CVE-2015-6575

SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly consider integer promotion, which allows remote attackers to execute arbitrary code or cause a denial of service integer overflow and memory corruption via crafted atoms in MP4 data, aka internal bug 20139950, a...

CVE-2015-3835

Buffer overflow in the OMXNodeInstance::emptyBuffer function in omx/OMXNodeInstance.cpp in libstagefright in Android before 5.1.1 LMY48I allows attackers to execute arbitrary code via a crafted application, aka internal bug 20634516...