PT-2015-2222 · Google+1 · Android+2
Joshua J. Drake
·
Published
2015-08-09
·
Updated
2017-09-21
·
CVE-2015-3828
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Android versions prior to 5.1.1 LMY48I
Description
The issue is related to the MPEG4Extractor::parse3GPPMetaData function in the libstagefright library, which does not enforce a minimum size for UTF-16 strings containing a Byte Order Mark (BOM). This allows remote attackers to execute arbitrary code or cause a denial of service via crafted 3GPP metadata, resulting in integer underflow and memory corruption. The vulnerability can be exploited to remotely execute code in affected devices.
Recommendations
For versions prior to 5.1.1 LMY48I, update to version 5.1.1 LMY48I or later to resolve the issue. As a temporary workaround, consider restricting the use of the libstagefright library until a patch is available. Avoid using the
MPEG4Extractor::parse3GPPMetaData function in the affected library to minimize the risk of exploitation.Fix
RCE
DoS
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Android
Huawei Vrp
Libstagefright