VULNERABILITY INTELLIGENCE

CVE-2015-1539

CVSS score10 HIGH
EPSS probability85.79%
CISA KEVNot currently listed
Published2015-10-01
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Multiple integer underflows in the ESDS::parseESDescriptor function in ESDS.cpp in libstagefright in Android before 5.1.1 LMY48I allow remote attackers to execute arbitrary code via crafted ESDS atoms, aka internal bug 20139950, a related issue to CVE-2015-4493.

Primary references