Vulnerabilities > CVE-2015-1539 - Numeric Errors vulnerability in Google Android

047910
CVSS 10.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
low complexity
google
CWE-189
critical

Summary

Multiple integer underflows in the ESDS::parseESDescriptor function in ESDS.cpp in libstagefright in Android before 5.1.1 LMY48I allow remote attackers to execute arbitrary code via crafted ESDS atoms, aka internal bug 20139950, a related issue to CVE-2015-4493.

Common Weakness Enumeration (CWE)

The Hacker News

idTHN:6EF19BF277B793F5A36108AF7A72F0D4
last seen2018-01-27
modified2015-09-11
published2015-09-11
reporterKhyati Jain
sourcehttps://thehackernews.com/2015/09/stagefright-android-exploit-code.html
titleAndroid Stagefright Exploit Code Released