VULNERABILITY INTELLIGENCE
CVE-2015-1538
CVSS score10 HIGH
EPSS probability99.06%
CISA KEVNot currently listed
Published2015-10-01
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code via crafted atoms in MP4 data that trigger an unchecked multiplication, aka internal bug 20139950, a related issue to CVE-2015-4496.