CVE-2015-3864

Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted MPEG-4 data, aka internal bug 23034759. NOTE: this vulnerability exists because of an...

CVE-2015-6575

SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly consider integer promotion, which allows remote attackers to execute arbitrary code or cause a denial of service integer overflow and memory corruption via crafted atoms in MP4 data, aka internal bug 20139950, a...

CVE-2014-7915

Integer overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified impact and attack vectors, aka internal bug 15328708...

Integer overflow

Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code via crafted atoms in MP4 data that trigger an unchecked multiplication, aka internal bug 20139950, a related...

CVE-2014-7917

Integer overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified impact and attack vectors, aka internal bug 15342615...

CVE-2015-3824

The entry CVE-2015-3824 concerns MPEG4Extractor::parseChunk in Android’s libstagefright (mediaserver). The flaw arises when processing MP4 tx3g atoms, where size calculations are not properly bounded, enabling remote attackers to cause memory corruption and potentially remote code execution or a ...

CVE-2015-3868

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 23270724...

PT-2015-2216

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48I Description The issue is caused by a buffer overflow in the OMXNodeInstance::emptyBuffer function in libstagefright. This allows attackers to execute arbitrary code via a crafted application...

CVE-2015-6575

Technical details for CVE-2015-6575 are not publicly available in the provided documents; monitor for updates from official advisories.

CVE-2015-3829

CVE-2015-3829 is an Android Stagefright vulnerability caused by an off-by-one error in MPEG4Extractor::parseChunk (libstagefright) that can allow remote code execution or memory corruption via crafted MPEG-4 covr atoms with size SIZE_MAX. Affected software: Android versions prior to 5.1.1 LMY48I....

CVE-2015-3861

CVE-2015-3861 targets Android mediaserver (libstagefright) via the Matroska MatroskaExtractor.cpp path. Multiple integer overflows in addVorbisCodecInfo cause memory corruption leading to a denial of service (device inoperability) when processing crafted Matroska data, affecting Android versions ...

PT-2015-2219

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48I Description The issue is caused by multiple buffer overflows in the libstagefright library of the Android operating system. Exploitation of these issues may allow a remote attacker to execute arbitrary co...

PT-2015-3049

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.0.0 Description The issue is caused by an integer overflow in the SampleTable.cpp file of the libstagefright component in the Android operating system. This can be exploited by a remote attacker to compromise the...

CVE-2015-1538

Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code via crafted atoms in MP4 data that trigger an unchecked multiplication, aka internal bug 20139950, a related...

CVE-2015-6575

SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly consider integer promotion, which allows remote attackers to execute arbitrary code or cause a denial of service integer overflow and memory corruption via crafted atoms in MP4 data, aka internal bug 20139950, a...

CVE-2015-6604

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 23129786...

PT-2015-2217

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48I libstagefright affected versions not specified Description The issue is caused by multiple integer overflows in the BnHDCP::onTransact function of the libstagefright library in the Android operating syste...

PT-2015-3050

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.0.0 Description The issue is caused by an integer overflow in the SampleTable.cpp file of the libstagefright component. This can potentially allow a remote attacker to compromise the confidentiality, integrity, and...

CVE-2015-3823

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 21335999...

CVE-2015-3872

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 23346388...