Published: 01/10/2015 Updated: 21/09/2017

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android prior to 5.1.1 LMY48I allows remote malicious users to execute arbitrary code via crafted atoms in MP4 data that trigger an unchecked multiplication, aka internal bug 20139950, a related issue to CVE-2015-4496.

Vulnerable Product	Search on Vulmon	Subscribe to Product
google android

#!/usr/bin/env python # Joshua J Drake (@jduck) of ZIMPERIUM zLabs # Shout outs to our friends at Optiv (formerly Accuvant Labs) # (C) Joshua J Drake, ZIMPERIUM Inc, Mobile Threat Protection, 2015 # wwwzimperiumcom # # Exploit for RCE Vulnerability CVE-2015-1538 #1 # Integer Overflow in the libstagefright MP4 ‘stsc’ atom handling # # Don’ ...

Android Stagefright remote code execution exploit that leverages an integer overflow in the libstagefright MP4 'stsc' atom handling ...

Vuln 2015_1538

2015_1538 #!/usr/bin/env python Joshua J Drake (@jduck) of ZIMPERIUM zLabs Shout outs to our friends at Optiv (formerly Accuvant Labs) (C) Joshua J Drake, ZIMPERIUM Inc, Mobile Threat Protection, 2015 wwwzimperiumcom Exploit for RCE Vulnerability CVE-2015-1538 #1 Integer Overflow in the libstagefright MP4 'stsc' atom handling Don't forget, the output of &qu

Google Android - 'Stagefright' Remote Code Execution - CVE-2015-1538

Android-vulnerability-exploitation Google Android - 'Stagefright' Remote Code Execution - CVE-2015-1538 Absolutely, I always choose Linux vulnerability, but then I had to choose different vulnerability else because I didn't know two people could do the same thing And then Having learned of this, I chose a different vulnerability, But because I had already solved

Local Root vulnerability- CVE-2019-13272 / Security Bypass Vulnerability – CVE-2019-14287/Google Android - 'Stagefright' Remote Code Execution - CVE-2015-1538

vulnerability-exploitation Local Root vulnerability- CVE-2019-13272 / Security Bypass Vulnerability – CVE-2019-14287/Google Android - 'Stagefright' Remote Code Execution - CVE-2015-1538 Absolutely, I always choose Linux vulnerability, but then I had to choose different vulnerability else because I didn't know two people could do the same thing And then Havi

Cve-2015-1538-1

Stagefright-cve-2015-1538-1 Discovered by Joshua J Drake (@jduck) of ZIMPERIUM zLabs and fixed his project by Niranjan Shrestha (@niranjanshr13) Exploit for RCE Vulnerability CVE-2015-1538 #1 Integer Overflow in the libstagefright MP4 'stsc' atom handling Don't forget, the output of "create_mp4" can be delivered many ways! MMS is the most dangerous at

It's BACK – Stagefright 2.0: Zillions of Android gadgets can be hijacked by MP3s, movie files

The Register • Darren Pauli • 01 Oct 2015

Pop tunes pop phones

Updated More than a billion Android phones, tablets and other gadgets can be hijacked by merely previewing MP3 music or MP4 video files. Booby-trapped songs and vids downloaded from the web or emails can potentially compromise vulnerable devices, and install spyware, password-stealing malware, and so on. This is all thanks to two remote-code execution flaws billed as the second iteration of the original Stagefright vulnerability. Zimperium researcher Joshua J Drake found the pair of Android secu...

CVE-2015-1538

Vulnerability Summary

Vulnerability Trend

Exploits

Github Repositories

Recent Articles

References

Vulmon Search

About

Products

Connect