CVE-2015-1538
50Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendepss 99%
da publicação à arma0 dias
Publicada no NVD1 de out.
1ª PoC9 de set.
probabilidade de exploração
99%top 1% das CVEs
exploração observada
nãonenhuma fonte reporta
10 exploit(s) público(s)
Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code via crafted atoms in MP4 data that trigger an unchecked multiplication, aka internal bug 20139950, a related issue to CVE-2015-4496.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 10✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/38124githubgithub.com/jduck/cve-2015-1538-1★ 205githubgithub.com/Tharana/vulnerability-exploitation★ 3githubgithub.com/oguzhantopgul/cve-2015-1538-1★ 3githubgithub.com/renjithsasidharan/cve-2015-1538-1★ 1githubgithub.com/Tharana/Android-vulnerability-exploitation★ 1githubgithub.com/xsleaksiki/cve★ 0githubgithub.com/niranjanshr13/Stagefright-cve-2015-1538-1★ 0cve_referencewww.exploit-db.com/exploits/38124/não verificadocve_referencepacketstormsecurity.com/files/134131/Libstagefright-Integer-Overflow-Check-Bypass.htmlnão verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://packetstormsecurity.com/files/134131/Libstagefright-Integer-Overflow-Check-Bypass.htmlhttps://android.googlesource.com/platform/frameworks/av/+/2434839bbd168469f80dd9a22f1328bc81046398https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJhttps://www.exploit-db.com/exploits/38124/http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-448928.htmhttp://www.huawei.com/en/psirt/security-advisories/hw-448928http://www.securityfocus.com/bid/76052http://www.securitytracker.com/id/1033094