CVE-2015-4496

Multiple integer overflows in libstagefright in Mozilla Firefox before 38.0 allow remote attackers to execute arbitrary code via crafted sample metadata in an MPEG-4 video file, a related issue to CVE-2015-1538.

• CWE-189

• http://www.mozilla.org/security/announce/2015/mfsa2015-93.htmlVendor Advisory
• http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlThird Party Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1149605Issue Tracking
• https://hg.mozilla.org/mozilla-central/rev/87277085561a
• http://www.mozilla.org/security/announce/2015/mfsa2015-93.htmlVendor Advisory
• http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlThird Party Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1149605Issue Tracking
• https://hg.mozilla.org/mozilla-central/rev/87277085561a

Published

Aug 16, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-4490The nsCSPHostSrc::permits function in dom/security/nsCSPUtil…
• CVE-2015-4491Integer overflow in the make_filter_table function in pixops…
• CVE-2015-4492Use-after-free vulnerability in the XMLHttpRequest::Open imp…
• CVE-2015-4493Heap-based buffer overflow in the stagefright::ESDS::parseES…
• CVE-2015-4494Mozilla Firefox OS before 2.2 does not require the wifi-mana…
• CVE-2015-4495The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR…8.8
• CVE-2015-4497Use-after-free vulnerability in the CanvasRenderingContext2D…
• CVE-2015-4498The add-on installation feature in Mozilla Firefox before 40…
• CVE-2015-4499Util.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.15, 4.3.x a…
• CVE-2015-4500Multiple unspecified vulnerabilities in the browser engine i…
• CVE-2015-4501Multiple unspecified vulnerabilities in the browser engine i…
• CVE-2015-4502js/src/proxy/Proxy.cpp in Mozilla Firefox before 41.0 mishan…