Back to all categorys

Integer overflows during MP4 atom processing

CVE-2015-1538

(json)

• CVE numbers: CVE-2015-1538 [Bulletin-CVE-2015-1538]
• Coordinated disclosure?: unknown
• Categories: Integer overflows during MP4 atom processing
• Details: Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code via crafted atoms in MP4 data that trigger an unchecked multiplication, aka internal bug 20139950, a related issue to CVE-2015-4496. [NIST-CVE-2015-1538]
• Discovered by: on: Unknown
• Reported on: 2015-08-01 [Bulletin-CVE-2015-1538]
• Fixed on: 2015-04-08 [ANDROID-20139950]
• Fix released on: Unknown
• Affected versions: 5.1 and below [Bulletin-CVE-2015-1538] regex: ([1-4].[0-9].[0-9])|(5.[0-1].[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2015-1538]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29