Lucene search

K
cvelistGoogle_androidCVELIST:CVE-2015-3824
HistoryOct 01, 2015 - 12:00 a.m.

CVE-2015-3824

2015-10-0100:00:00
google_android
www.cve.org
1

AI Score

7.8

Confidence

Low

EPSS

0.184

Percentile

96.2%

The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly restrict size addition, which allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow and memory corruption) via a crafted MPEG-4 tx3g atom, aka internal bug 20923261.

AI Score

7.8

Confidence

Low

EPSS

0.184

Percentile

96.2%