cve-2015-1538-1

以下は、CVE-2015-1538（1）として知られる「stsc」脆弱性を悪用し、MP4を生成するPythonスクリプトです。これは私がStagefrightライブラリで報告した最も重大な脆弱性の1つです。このエクスプロイトの期待される結果は、mediaユーザーとしてのリバースシェルです。私のBlack HatおよびDEF...

cve-2015-1538-1

이 내용은 누구와도 공유하지 마십시오. 이 코드는 FrienNDA에 따라 귀하에게 제공됩니다. 이를 위반하는 사람은 더 이상 친구로 간주되지 않습니다. 포함된 Python 스크립트는 CVE-2015-15381로 알려진 'stsc' 취약점을 악용하는 MP4를 생성합니다. 이는 제가 Stagefright 라이브러리에서 보고한 가장 치명적인 취약점 중 하나입니다. 이 익스플로잇의 예상 결과는 media 사용자 권한으로 실행되는 리버스 셸입니다. 제 Black Hat 및 DEF CON 프레젠테이션에서 자세히 설명했듯이, 이 사용자는...

Stagefright-cve-2015-1538-1

Stagefright-cve-2015-1538-1 ZIMPERIUM zLabs의 Joshua J. Drake@jduck가 발견했으며, Niranjan Shrestha@niranjanshr13가 그의 프로젝트를 수정했습니다. RCE 취약점 CVE-2015-1538 1용 익스플로잇 libstagefright MP4 'stsc' atom 처리의 정수 오버플로 'createmp4'의 출력물은 다양한 방식으로 전달될 수 있다는 점을 잊지 마세요! MMS가 가장 위험한 공격 벡터이지만, 유일한 방법은 아닙니다... 면책 조항: 이...

cve-2015-1538-1

이 Python 스크립트는 'stsc' 취약점CVE-2015-1538 1이라고도 알려짐을 악용하는 MP4를 생성합니다. 이는 제가 Stagefright 라이브러리에서 보고한 가장 치명적인 취약점 중 하나입니다. 이 익스플로잇의 예상 결과는 미디어 사용자 권한으로의 리버스 셸입니다. 제 Black Hat 및 DEF CON 발표에서 자세히 설명했듯이, 이 사용자는 inet, audio, camera, mediadrm과 같은 여러 그룹에 대한 액세스 권한도 가지고 있습니다. 이러한 그룹을 통해 공격자는 추가 취약점을 악용하지 않고도...

Astra Linux – Vulnerability in libheif

libheif is a decoder and encoder for HEIF and AVIF file formats. In versions 1.21.2 and earlier, a crafted 792-byte HEIF sequence file with samplesperchunk=0 in the stsc field could cause an unsigned integer underflow in the Chunk constructor mlastsample = 0 + 0 - 1 = UINT32MAX, causing all sampl...

PT-2026-49253

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 792-byte HEIF sequence file with samples per chunk=0 in the stsc box causes an unsigned integer underflow in the Chunk constructor m last sample = 0 + 0 - 1 = UINT32 MAX, mapping all samples to an...

SUSE CVE-2026-32738

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 792-byte HEIF sequence file with samplesperchunk=0 in the stsc box causes an unsigned integer underflow in the Chunk constructor mlastsample = 0 + 0 - 1 = UINT32MAX, mapping all samples to an empty...

ALPINE-CVE-2026-32738

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 792-byte HEIF sequence file with samplesperchunk=0 in the stsc box causes an unsigned integer underflow in the Chunk constructor mlastsample = 0 + 0 - 1 = UINT32MAX, mapping all samples to an empty...

UBUNTU-CVE-2026-32738

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 792-byte HEIF sequence file with samplesperchunk=0 in the stsc box causes an unsigned integer underflow in the Chunk constructor mlastsample = 0 + 0 - 1 = UINT32MAX, mapping all samples to an empty...

CVE-2026-32738 libheif has a Heap OOB Read/SEGV Crash via Zero samples_per_chunk

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 792-byte HEIF sequence file with samplesperchunk=0 in the stsc box causes an unsigned integer underflow in the Chunk constructor mlastsample = 0 + 0 - 1 = UINT32MAX, mapping all samples to an empty...

EUVD-2026-30972

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 792-byte HEIF sequence file with samplesperchunk=0 in the stsc box causes an unsigned integer underflow in the Chunk constructor mlastsample = 0 + 0 - 1 = UINT32MAX, mapping all samples to an empty...

CVE-2026-32738

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 792-byte HEIF sequence file with samplesperchunk=0 in the stsc box causes an unsigned integer underflow in the Chunk constructor mlastsample = 0 + 0 - 1 = UINT32MAX, mapping all samples to an empty...

CVE-2026-32738

libheif (versions

libheif 缓冲区错误漏洞

LibHEIF is a open-source decoder and encoder for the ISO/IEC 23008-12:2017 HEIF file format developed by Struktur. Versions of LibHEIF prior to 1.21.2 contain a buffer error vulnerability. This vulnerability arises from setting samplesperchunk=0 in the stsc box, causing an unsigned integer...

CVE-2026-32738: Out-of-bounds Read

libheif is a HEIF and AVIF file format decoder and encoder. In versions 1.21.2 and below, a crafted 792-byte HEIF sequence file with samplesperchunk=0 in the stsc box causes an unsigned integer underflow in the Chunk constructor mlastsample = 0 + 0 - 1 = UINT32MAX, mapping all samples to an empty...

EUVD-2011-0275

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2017-14259

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the SDK in Bento4 1.5.0-616, the AP4StscAtom class in Ap4StscAtom.cpp contains a Write Memory Access Violation vulnerability. It is possible to exploit this...

Linux Distros Unpatched Vulnerability : CVE-2021-21845

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A...

CLSA-2025-1744633827 nginx: Fix of CVE-2024-7347

CVE-2024-7347: fix MP4 stsc cropping: prevent overflow and buffer underread causing invalid seeks and possible segfault...

DEBIAN-CVE-2021-21845

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input in “stsc” decoder can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffe...