QwikSec

Security Database

CVE

CWE

Training

CVE-2015-3861

Published: Oct 1, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

Multiple integer overflows in the addVorbisCodecInfo function in matroska/MatroskaExtractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allow remote attackers to cause a denial of service (device inoperability) via crafted Matroska data, aka internal bug 21296336.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

[android-security-updates] 20150909 Nexus Security Bulletin (September 2015)

mailing-list

x_refsource_MLIST

https://android.googlesource.com/platform/frameworks/av/+/304ef91624e12661e7e35c2c0c235da84a73e9c0

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.