CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2015-3861
https://notcve.org/view.php?id=CVE-2015-3861
01 Oct 2015 — Multiple integer overflows in the addVorbisCodecInfo function in matroska/MatroskaExtractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allow remote attackers to cause a denial of service (device inoperability) via crafted Matroska data, aka internal bug 21296336. Múltiples desbordamientos de entero en la función addVorbisCodecInfo en matroska/MatroskaExtractor.cpp en libstagefright en mediaserver en Android en versiones anteriores a 5.1.1 LMY48M permiten a atacantes remotos provocar... • https://android.googlesource.com/platform/frameworks/av/+/304ef91624e12661e7e35c2c0c235da84a73e9c0 • CWE-189: Numeric Errors •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2014-7915
https://notcve.org/view.php?id=CVE-2014-7915
01 Oct 2015 — Integer overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified impact and attack vectors, aka internal bug 15328708. Desbordamiento de entero en SampleTable.cpp en libstagefright en Android en versiones anteriores a 5.0.0, tiene un impacto y vectores de ataque no especificados, también conocida como error interno 15328708. • http://events.linuxfoundation.org/sites/events/files/slides/ABS2015.pdf • CWE-189: Numeric Errors •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2015-3858
https://notcve.org/view.php?id=CVE-2015-3858
01 Oct 2015 — The checkDestination function in internal/telephony/SMSDispatcher.java in Android before 5.1.1 LMY48M relies on an obsolete permission name for an authorization check, which allows attackers to bypass an intended user-confirmation requirement for SMS short-code messaging via a crafted application, aka internal bug 22314646. La función checkDestination en internal/telephony/SMSDispatcher.java en Android en versiones anteriores a 5.1.1 LMY48M confía en un nombre de permiso obsoleto para una comporbación de au... • https://android.googlesource.com/platform/frameworks/opt/telephony/+/df31d37d285dde9911b699837c351aed2320b586 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.5EPSS: 4%CPEs: 1EXPL: 0CVE-2015-3826
https://notcve.org/view.php?id=CVE-2015-3826
01 Oct 2015 — The MPEG4Extractor::parse3GPPMetaData function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not enforce a minimum size for UTF-16 strings containing a Byte Order Mark (BOM), which allows remote attackers to cause a denial of service (integer underflow, buffer over-read, and mediaserver process crash) via crafted 3GPP metadata, aka internal bug 20923261, a related issue to CVE-2015-3828. La función MPEG4Extractor::parse3GPPMetaData en MPEG4Extractor.cpp en libstagefright en And... • http://www.huawei.com/en/psirt/security-advisories/hw-448928 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-189: Numeric Errors •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2015-3835
https://notcve.org/view.php?id=CVE-2015-3835
01 Oct 2015 — Buffer overflow in the OMXNodeInstance::emptyBuffer function in omx/OMXNodeInstance.cpp in libstagefright in Android before 5.1.1 LMY48I allows attackers to execute arbitrary code via a crafted application, aka internal bug 20634516. Desbordamiento de buffer en la función OMXNodeInstance::emptyBuffer en omx/OMXNodeInstance.cpp en libstagefright en Android en versiones anteriores a 5.1.1 LMY48I permite a atacantes ejecutar código arbitrario a través de una aplicación manipulada, también conocido como error i... • https://android.googlesource.com/platform/frameworks/av/+/086d84f45ab7b64d1a7ed7ac8ba5833664a6a5ab • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 9.3EPSS: 0%CPEs: 1EXPL: 0CVE-2015-3863
https://notcve.org/view.php?id=CVE-2015-3863
01 Oct 2015 — Multiple integer overflows in the Blob class in keystore/keystore.cpp in Keystore in Android before 5.1.1 LMY48M allow attackers to execute arbitrary code and read arbitrary Keystore keys via an application that uses a crafted blob in an insert operation, aka internal bug 22802399. Múltiples desbordamientos de entero en la clase Blob en keystore/keystore.cpp en Keystore en Android en versiones anteriores a 5.1.1 LMY48M permiten a atacantes ejecutar código arbitrario y leer claves de Keystore arbitrarias a t... • https://android.googlesource.com/platform/system/security/+/bb9f4392c2f1b11be3acdc1737828274ff1ec55b • CWE-189: Numeric Errors •
CVSS: 10.0EPSS: 96%CPEs: 1EXPL: 9CVE-2015-3864 – Google Android - libstagefright Integer Overflow Remote Code Execution
https://notcve.org/view.php?id=CVE-2015-3864
01 Oct 2015 — Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted MPEG-4 data, aka internal bug 23034759. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3824. Desbordamiento de entero inferior en la función MPEG4Extractor::parseChunk en MPEG4Extractor.cpp en libstagefright en mediaserver en Android en versiones anteriores a 5.1.1 LMY48M per... • https://packetstorm.news/files/id/138853 • CWE-189: Numeric Errors •
CVSS: 10.0EPSS: 93%CPEs: 1EXPL: 8CVE-2015-1538 – Google Android - 'Stagefright' Remote Code Execution
https://notcve.org/view.php?id=CVE-2015-1538
10 Sep 2015 — Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code via crafted atoms in MP4 data that trigger an unchecked multiplication, aka internal bug 20139950, a related issue to CVE-2015-4496. Desbordamiento de entero en la función SampleTable::setSampleToChunkParams en SampleTable.cpp en libstagefright en Android en versiones anteriores a 5.1.1 LMY48I, permite a atacantes remotos e... • https://packetstorm.news/files/id/133521 • CWE-189: Numeric Errors •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2015-2714 – Gentoo Linux Security Advisory 201605-06
https://notcve.org/view.php?id=CVE-2015-2714
14 May 2015 — Mozilla Firefox before 38.0 on Android does not properly restrict writing URL data to the Android logging system, which allows attackers to obtain sensitive information via a crafted application that has a required permission for reading a log, as demonstrated by the READ_LOGS permission for the mixed-content violation log on Android 4.0 and earlier. Mozilla Firefox anterior a 38.0 en Android no restringe correctamente la escritura de datos de URLs en el sistema de registros de, lo que permite a atacantes o... • http://www.mozilla.org/security/announce/2015/mfsa2015-52.html • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2015-1525 – Google Android Denial of Service
https://notcve.org/view.php?id=CVE-2015-1525
14 Mar 2015 — audio/AudioPolicyManagerBase.cpp in Android before 5.1 allows attackers to cause a denial of service (audio_policy application outage) via a crafted application that provides a NULL device address. El archivo audio/AudioPolicyManagerBase.cpp en Android versiones anteriores a 5.1, permite a atacantes causar una denegación de servicio (interrupción de la aplicación audio_policy) por medio de una aplicación diseñada que provee una dirección de dispositivo NULL. Google Android suffers from an audio_policy appli... • https://android.googlesource.com/platform/hardware/libhardware_legacy/+/2d2ea50%5E%21 • CWE-20: Improper Input Validation •