VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 1, 2015· Updated Jun 17, 2026

CVE-2015-3861

CVE-2015-3861

Description

Multiple integer overflows in the addVorbisCodecInfo function in matroska/MatroskaExtractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allow remote attackers to cause a denial of service (device inoperability) via crafted Matroska data, aka internal bug 21296336.

Affected products

2
  • Google/Androidllm-create2 versions
    <5.1.1 LMY48M+ 1 more
    • (no CPE)range: <5.1.1 LMY48M
    • cpe:2.3:o:google:android:*:*:*:*:*:*:*:*range: <=5.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.