PT-2015-2223 · Google+1 · Android+2

Joshua J. Drake · Published 2015-08-09 · Updated 2017-09-21 · CVE-2015-3827

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48I

Description The issue is related to an integer underflow in the MPEG4Extractor::parseChunk function of the libstagefright library in Android. This can be exploited by a remote attacker using specially crafted MPEG-4 data, potentially allowing the execution of arbitrary code or causing a denial of service due to memory corruption. The vulnerability can be triggered via crafted MPEG-4 covr atoms.

Recommendations For Android versions prior to 5.1.1 LMY48I, update to version 5.1.1 LMY48I or later to resolve the issue. As a temporary workaround, consider restricting the use of the MPEG4Extractor::parseChunk function until a patch is available. Avoid using the libstagefright library to parse untrusted MPEG-4 data until the issue is resolved.

Fix

RCE

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-189

Related Identifiers

BDU:2015-11569

CVE-2015-3827

Affected Products

Android

Huawei Vrp

Libstagefright

References · 10

• https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ · Vendor Advisory
• https://android.googlesource.com/platform/frameworks/av/+/f4a88c8ed4f8186b3d6e2852993e063fc33ff231 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3827 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-3827 · Security Note
• https://bdu.fstec.ru/vul/2015-11569 · Security Note
• http://huawei.com/en/psirt/security-advisories/hw-448928 · Note
• http://securitytracker.com/id/1033094 · Note
• http://securityfocus.com/bid/76052 · Note
• http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-448928.htm · Note
• https://huawei.com/en/psirt/security-advisories/hw-448928 · Note