CVE-2015-1538
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
50Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendepss 99%
da publicação à armano mesmo dia
Publicada no NVD1 de out.
1ª PoC9 de set.
Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code via crafted atoms in MP4 data that trigger an unchecked multiplication, aka internal bug 20139950, a related issue to CVE-2015-4496.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 10✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/38124githubgithub.com/jduck/cve-2015-1538-1★ 205githubgithub.com/Tharana/vulnerability-exploitation★ 3githubgithub.com/oguzhantopgul/cve-2015-1538-1★ 3githubgithub.com/Tharana/Android-vulnerability-exploitation★ 1githubgithub.com/renjithsasidharan/cve-2015-1538-1★ 1githubgithub.com/niranjanshr13/Stagefright-cve-2015-1538-1★ 0githubgithub.com/xsleaksiki/cve★ 0cve_referencepacketstormsecurity.com/files/134131/Libstagefright-Integer-Overflow-Check-Bypass.htmlnão verificadocve_referencewww.exploit-db.com/exploits/38124/não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://packetstormsecurity.com/files/134131/Libstagefright-Integer-Overflow-Check-Bypass.htmlhttps://android.googlesource.com/platform/frameworks/av/+/2434839bbd168469f80dd9a22f1328bc81046398https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJhttps://www.exploit-db.com/exploits/38124/http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-448928.htmhttp://www.huawei.com/en/psirt/security-advisories/hw-448928http://www.securityfocus.com/bid/76052http://www.securitytracker.com/id/1033094