Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly consider integer promotion, which allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow and memory corruption) via crafted atoms in MP4 data, aka internal bug 20139950, a different vulnerability than CVE-2015-1538. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-7915, CVE-2014-7916, and/or CVE-2014-7917.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Android libstagefright 数字错误漏洞
Vulnerability Description
Google Chrome是美国谷歌（Google）公司开发的一款Web浏览器。Android是美国谷歌（Google）公司和开放手持设备联盟（简称OHA）共同开发的一套以Linux为基础的开源操作系统。libstagefright是其中的一个硬解码支持库。 Android 5.1及之前版本的libstagefright中的SampleTable.cpp文件存在安全漏洞，该漏洞源于程序没有正确考虑整型提升。远程攻击者可借助MP4数据中特制的元素利用该漏洞执行任意代码，或造成拒绝服务（整数溢出和内存损坏）。
CVSS Information
N/A
Vulnerability Type
N/A