CVE-2014-7916
published 2015-10-01CVE-2014-7916: Integer overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified impact and attack vectors, aka internal bug 15342751.
PriorityP428critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
0.62%
46.4th percentile
Integer overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified impact and attack vectors, aka internal bug 15342751.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | <= 5.1 | — | |
| android | <= 4.4.4 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-cqhf-ph9c-rp8h: Integer overflow in SampleTable
ghsa_unreviewed·2022-05-17
CVE-2014-7916 [HIGH] GHSA-cqhf-ph9c-rp8h: Integer overflow in SampleTable
Integer overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified impact and attack vectors, aka internal bug 15342751.
GHSA
GHSA-jwjv-jgw7-mgm2: SampleTable
ghsa_unreviewed·2022-05-17·CVSS 10.0
CVE-2015-6575 [CRITICAL] GHSA-jwjv-jgw7-mgm2: SampleTable
SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly consider integer promotion, which allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow and memory corruption) via crafted atoms in MP4 data, aka internal bug 20139950, a different vulnerability than CVE-2015-1538. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-7915, CVE-2014-7916, and/or CVE-2014-7917.
No detection rules found.
No writeups or analysis indexed.
http://events.linuxfoundation.org/sites/events/files/slides/ABS2015.pdfhttps://android.googlesource.com/platform/frameworks/av/+/edd4a76eb4747bd19ed122df46fa46b452c12a0dhttp://events.linuxfoundation.org/sites/events/files/slides/ABS2015.pdfhttps://android.googlesource.com/platform/frameworks/av/+/edd4a76eb4747bd19ed122df46fa46b452c12a0d
2015-10-01
Published