Buffer overflow in libstagefright during MP4 video playback

Related Vulnerabilities: CVE-2015-0829  

Mozilla Foundation Security Advisory 2015-17

Buffer overflow in libstagefright during MP4 video playback

Announced
February 24, 2015
Reporter
Pantrombka
Impact
Critical
Products
Firefox, Firefox OS, SeaMonkey
Fixed in
  • Firefox 36
  • Firefox OS 2.2
  • SeaMonkey 2.33

Description

Security researcher Pantrombka reported a buffer overflow in the libstagefright library during video playback when certain invalid MP4 video files led to the allocation of a buffer that was too small for the content. This led to a potentially exploitable crash.

References