Beveiligingsadvies

CVE-2015-3864

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2015-10-01 00:00:00
Laatst bijgewerkt 2024-08-06 05:56:15
Toegewezen door google_android
CVSS-score geen score
Status PUBLISHED

Beschrijving

Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted MPEG-4 data, aka internal bug 23034759. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3824.