CVE-2015-1539
Publication date 1 October 2015
Last updated 24 July 2024
Ubuntu priority
Description
Multiple integer underflows in the ESDS::parseESDescriptor function in ESDS.cpp in libstagefright in Android before 5.1.1 LMY48I allow remote attackers to execute arbitrary code via crafted ESDS atoms, aka internal bug 20139950, a related issue to CVE-2015-4493.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| android | ||
| 14.04 LTS trusty | Not in release | |
Notes
jdstrand
please see CVE-2015-1538 for details until more information is public Ubuntu 14.04 is affected but no supported images use it