Description
Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code via crafted atoms in MP4 data that trigger an unchecked multiplication, aka internal bug 20139950, a related issue to CVE-2015-4496.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 1
- Google Android - 'Stagefright' Remote Code Execution EDB-38124 · remote · Sep 9, 2015 · verified
GitHub 7 repositories
-
jduck/cve-2015-1538-1 ★ 205 · Sep 10, 2015
An exploit for CVE-2015-1538-1 - Google Stagefright ‘stsc’ MP4 Atom Integer Overflow Remote Code Execution
-
Tharana/vulnerability-exploitation ★ 3 · May 12, 2020
Local Root vulnerability- CVE-2019-13272 / Security Bypass Vulnerability – CVE-2019-14287/Google Android - 'Stagefright' Remote Code Execution - CVE-2015-1538
-
oguzhantopgul/cve-2015-1538-1 ★ 3 · Sep 9, 2015
An exploit for CVE-2015-1538-1 - Google Stagefright ‘stsc’ MP4 Atom Integer Overflow Remote Code Execution
-
Tharana/Android-vulnerability-exploitation ★ 1 · May 11, 2020
Google Android - 'Stagefright' Remote Code Execution - CVE-2015-1538
-
renjithsasidharan/cve-2015-1538-1 ★ 1 · Sep 10, 2015
An exploit for CVE-2015-1538-1 - Google Stagefright ‘stsc’ MP4 Atom Integer Overflow Remote Code Execution
-
xsleaksiki/cve ★ 0 · Jan 12, 2026
An exploit for CVE-2015-1538-1 - Google Stagefright ‘stsc’ MP4 Atom Integer Overflow Remote Code Execution
-
niranjanshr13/Stagefright-cve-2015-1538-1 ★ 0 · Mar 20, 2016
Cve-2015-1538-1
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- https://android.googlesource.com/platform/frameworks/av/+/2434839bbd168469f80dd9a22f1328bc81046398
- http://packetstormsecurity.com/files/134131/Libstagefright-Integer-Overflow-Check-Bypass.html
- 1033094 vdb-entry
- 76052 vdb-entry
- 38124 exploit
- http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-448928.htm
- http://www.huawei.com/en/psirt/security-advisories/hw-448928
- [android-security-updates] 20150812 Nexus Security Bulletin (August 2015) mailing-list