CVE-2015-1538
Last modified
CVE-2015-1538 is a vulnerability of currently unknown severity. Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code via crafted atoms in MP4 data that trigger an unchecked multiplication, aka internal bug 20139950, a related issue to CVE-2015-4496.. EPSS estimates a 99.06% chance of exploitation in the next 30 days.
Description
Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code via crafted atoms in MP4 data that trigger an unchecked multiplication, aka internal bug 20139950, a related issue to CVE-2015-4496.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Android | <= 5.1 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2015-1538?
How severe is CVE-2015-1538?
How do I fix CVE-2015-1538?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2015
- CVE-2015-1527Integer overflow in IAudioPolicyService.cpp in Android allow…
- CVE-2015-1528Integer overflow in the native_handle_create function in lib…
- CVE-2015-1529Integer overflow in soundtrigger/ISoundTriggerHwService.cpp …
- CVE-2015-1530media/libmedia/IAudioPolicyService.cpp in Android before 5.1…7.8
- CVE-2015-1536Integer overflow in the Bitmap_createFromParcel function in …
- CVE-2015-1537Integer overflow in IHDCP.cpp in the media_server component …
- CVE-2015-1539Multiple integer underflows in the ESDS::parseESDescriptor f…
- CVE-2015-1541The AppWidgetServiceImpl implementation in com/android/serve…
- CVE-2015-1545The deref_parseCtrl function in servers/slapd/overlays/deref…
- CVE-2015-1546Double free vulnerability in the get_vrFilter function in se…
- CVE-2015-1547The NeXTDecode function in tif_next.c in LibTIFF allows remo…
- CVE-2015-1548mini_httpd 1.21 and earlier allows remote attackers to obtai…
Are you affected by CVE-2015-1538?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST