VULNERABILITY INTELLIGENCE
CVE-2015-4480
CVSS score9.3 HIGH
EPSS probability5.71%
CISA KEVNot currently listed
Published2015-08-16
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Integer overflow in the stagefright::SampleTable::isValid function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via crafted MPEG-4 video data with H.264 encoding.