PT-2015-2221 · Google+1 · Android+1

Joshua J. Drake · Published 2015-08-09 · Updated 2017-09-21 · CVE-2015-3829

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48I

Description The issue is related to an off-by-one error in the MPEG4Extractor::parseChunk function, which can lead to an integer overflow and memory corruption. This can be exploited by remote attackers using crafted MPEG-4 covr atoms with a size equal to SIZE MAX. The exploitation may result in the execution of arbitrary code or a denial of service. The vulnerability is associated with an integer overflow in the libstagefright library of the Android operating system.

Recommendations For Android versions prior to 5.1.1 LMY48I, update to version 5.1.1 LMY48I or later to resolve the issue. As a temporary workaround, consider restricting the use of the MPEG4Extractor::parseChunk function until a patch is available. Avoid using specially crafted MPEG-4 data that could trigger the vulnerability.

Fix

RCE

DoS

Weakness Enumeration

CWE-189

Related Identifiers

BDU:2015-11567

CVE-2015-3829

Affected Products

Android

Huawei Vrp

References · 10

• https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-11567 · Security Note
• https://android.googlesource.com/platform/frameworks/av/+/2674a7218eaa3c87f2ee26d26da5b9170e10f859 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-3829 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3829 · Security Note
• http://securityfocus.com/bid/76052 · Note
• http://securitytracker.com/id/1033094 · Note
• http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-448928.htm · Note
• https://huawei.com/en/psirt/security-advisories/hw-448928 · Note
• http://huawei.com/en/psirt/security-advisories/hw-448928 · Note