libstagefright in Android 5.x before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 20721050, a different vulnerability than CVE-2015-3873.
Max CVSS
10.0
EPSS Score
0.15%
Published
2015-10-06
Updated
2015-10-07
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23129786.
Max CVSS
10.0
EPSS Score
0.15%
Published
2015-10-06
Updated
2015-10-07
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23227354.
Max CVSS
10.0
EPSS Score
0.15%
Published
2015-10-06
Updated
2015-10-07
libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a (1) MP3 or (2) MP4 file, as demonstrated by an attack against use of libutils by libstagefright in Android 5.x.
Max CVSS
9.3
EPSS Score
0.86%
Published
2015-10-02
Updated
2016-12-08
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 22935234.
Max CVSS
10.0
EPSS Score
0.15%
Published
2015-10-06
Updated
2015-10-07
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 22882938.
Max CVSS
10.0
EPSS Score
0.15%
Published
2015-10-06
Updated
2015-10-07
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23416608.
Max CVSS
10.0
EPSS Score
0.15%
Published
2015-10-06
Updated
2015-10-07
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23306638.
Max CVSS
10.0
EPSS Score
0.15%
Published
2015-10-06
Updated
2015-10-07
SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly consider integer promotion, which allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow and memory corruption) via crafted atoms in MP4 data, aka internal bug 20139950, a different vulnerability than CVE-2015-1538. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-7915, CVE-2014-7916, and/or CVE-2014-7917.
Max CVSS
10.0
EPSS Score
0.18%
Published
2015-10-01
Updated
2015-10-01
Skia, as used in Android before 5.1.1 LMY48T, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 20723696.
Max CVSS
10.0
EPSS Score
0.15%
Published
2015-10-06
Updated
2015-10-07
libstagefright in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a (1) MP3 or (2) MP4 file.
Max CVSS
9.3
EPSS Score
6.42%
Published
2015-10-02
Updated
2016-12-08
libutils in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted audio file, aka internal bug 22952485.
Max CVSS
10.0
EPSS Score
0.18%
Published
2015-10-06
Updated
2015-10-07
The Sonivox components in Android before 5.1.1 LMY48T allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bugs 23335715, 23307276, and 23286323.
Max CVSS
10.0
EPSS Score
0.15%
Published
2015-10-06
Updated
2015-10-07
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bugs 23016072, 23248776, 23247055, 22845824, 22008959, 21814993, 21048776, 20718524, 20674674, 22388975, 20674086, 21443020, and 22077698, a different vulnerability than CVE-2015-7716.
Max CVSS
10.0
EPSS Score
0.15%
Published
2015-10-06
Updated
2015-10-07
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23346388.
Max CVSS
10.0
EPSS Score
0.15%
Published
2015-10-06
Updated
2015-10-07
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23031033.
Max CVSS
10.0
EPSS Score
0.15%
Published
2015-10-06
Updated
2015-10-07
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 22771132.
Max CVSS
10.0
EPSS Score
0.15%
Published
2015-10-06
Updated
2015-10-07
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23036083.
Max CVSS
10.0
EPSS Score
0.15%
Published
2015-10-06
Updated
2015-10-07
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23270724.
Max CVSS
10.0
EPSS Score
0.15%
Published
2015-10-06
Updated
2016-12-07
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23213430.
Max CVSS
10.0
EPSS Score
0.15%
Published
2015-10-06
Updated
2015-10-07
CVE-2015-3864
Public exploit
Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted MPEG-4 data, aka internal bug 23034759. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3824.
Max CVSS
10.0
EPSS Score
97.18%
Published
2015-10-01
Updated
2017-09-16
Multiple integer overflows in the Blob class in keystore/keystore.cpp in Keystore in Android before 5.1.1 LMY48M allow attackers to execute arbitrary code and read arbitrary Keystore keys via an application that uses a crafted blob in an insert operation, aka internal bug 22802399.
Max CVSS
9.3
EPSS Score
0.06%
Published
2015-10-01
Updated
2015-10-01
The Region_createFromParcel function in core/jni/android/graphics/Region.cpp in Region in Android before 5.1.1 LMY48M does not check the return values of certain read operations, which allows attackers to execute arbitrary code via an application that sends a crafted message to a service, aka internal bug 21585255.
Max CVSS
9.3
EPSS Score
0.17%
Published
2015-10-01
Updated
2015-10-01
Multiple heap-based buffer overflows in libeffects in the Audio Policy Service in mediaserver in Android before 5.1.1 LMY48I allow attackers to execute arbitrary code via a crafted application, aka internal bug 21953516.
Max CVSS
9.3
EPSS Score
0.07%
Published
2015-10-01
Updated
2015-10-01
The OpenSSLX509Certificate class in org/conscrypt/OpenSSLX509Certificate.java in Android before 5.1.1 LMY48I improperly includes certain context data during serialization and deserialization, which allows attackers to execute arbitrary code via an application that sends a crafted Intent, aka internal bug 21437603.
Max CVSS
9.3
EPSS Score
0.08%
Published
2015-10-01
Updated
2015-10-01