Vulnerability in Google Android
CVE-2015-3864
Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted MPEG-4 data, aka internal bug 23034759. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3824.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 10.0 (High). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.871 (99.8th percentile), scored .
High probability of exploitation in the next 30 days — patch promptly. 100th percentile — 99.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.871 · newest: 0.871 · change: 0.000
Affected products
Weakness classification (CWE)
Public proof-of-concept exploits
- eudemonics/scaredycat
- pwnaccelerator/stagefright-cve-2015-3864
- Cmadhushanka/CVE-2015-3864-Exploitation
- Bhathiya404/Exploiting-Stagefright-Vulnerability-CVE-2015-3864
- HenryVHuang/CVE-2015-3864
- rapid7/metasploit-framework
- ARPSyndicate/cvemon
- HighW4y2H3ll/libstagefrightExploit
- hac425xxx/heap-exploitation-in-real-world
- hoangcuongflp/MobileSecurity2016-recap
References
- groups.google.com/forum/message/raw (Vendor Advisory, mailing-list)
- blog.zimperium.com/cve-2015-3864-metasploit-module-now-available-for-testing/ (Third Party Advisory, Release Notes)
- android.googlesource.com/platform/frameworks/av/+/6fe85f7e15203e48df2cc3e8e1c4b… (Vendor Advisory)
- www.exploit-db.com/exploits/38226/ (exploit)
- www.securityfocus.com/bid/76682 (vdb-entry)
- blog.zimperium.com/reflecting-on-stagefright-patches/
- www.exploit-db.com/exploits/40436/ (exploit)
- www.exploit-db.com/exploits/39640/ (exploit)
Frequently asked questions
- What is CVE-2015-3864?
- CVE-2015-3864 is a vulnerability in Google Android, classified under CWE-189. Published 2015-10-01.
- Is CVE-2015-3864 known to be exploited?
- 11 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.