VULNERABILITY INTELLIGENCE

CVE-2015-3876

CVSS score9.3 HIGH

EPSS probability3.14%

CISA KEVNot currently listed

Published2015-10-02

Last modified2026-06-17

CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

libstagefright in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a (1) MP3 or (2) MP4 file.

security@android.com — Press/Media Coverage, Third Party Advisory
security@android.com — Third Party Advisory, VDB Entry
security@android.com — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Press/Media Coverage, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory