CVE-2015-3835 Buffer overflow in the OMXNodeInstance::emptyBuffer function in omx/OMXNodeInstance.cpp in libstagefright in Android before 5.1.1 LMY48I allows attackers to execute arbitrary code via a crafted applic...
HighCVSS 9.3
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the OMXNodeInstance::emptyBuffer function in omx/OMXNodeInstance.cpp in libstagefright in Android before 5.1.1 LMY48I allows attackers to execute arbitrary code via a crafted application, aka internal bug 20634516.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Android | <= 5.1 | No fix listed |
References
- android.googlesource.com vendor-advisory
- android.googlesource.com vendor-advisory
- [android-security-updates] 20150812 Nexus Security Bulletin (August 2015) mailing-list vendor-advisory