NVD

Id
23822  
Name
CVE-2015-1538  
Description
Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code via crafted atoms in MP4 data that trigger an unchecked multiplication, aka internal bug 20139950, a related issue to CVE-2015-4496.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-09-30  
Modified Date
2016-12-07  
Seq
2015-1538  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
126561 23822 CVE-2015-1538 http://packetstormsecurity.com/files/134131/Libstagefright-Integer-Overflow-Check-Bypass.html  View
126562 23822 CVE-2015-1538 http://www.huawei.com/en/psirt/security-advisories/hw-448928  View
126563 23822 CVE-2015-1538 76052  View
126564 23822 CVE-2015-1538 http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-448928.htm  View
126565 23822 CVE-2015-1538 https://android.googlesource.com/platform/frameworks/av/+/2434839bbd168469f80dd9a22f1328bc81046398  View
126566 23822 CVE-2015-1538 [android-security-updates] 20150812 Nexus Security Bulletin (August 2015)  View
126567 23822 CVE-2015-1538 38124  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
8629 JVNDB-2015-003949 Android の libstagefright の SampleTable.cpp の SampleTable::setSampleToChunkParams 関数における整数オーバーフローの脆弱性 Android の libstagefright の SampleTable.cpp の SampleTable::setSampleToChunkParams 関数には、整数オーバーフローの脆弱性が存在します。 CVE-2015-1538 78763 CVE-2015-1538 23822 10 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003949.html 2015-07-28 2015-10-02 View