← All advisories

Unrated severityNVD Advisory· Published Oct 2, 2015· Updated Jun 17, 2026

CVE-2015-3876

CVE-2015-3876

Description

libstagefright in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a (1) MP3 or (2) MP4 file.

Affected products

1

Google/Android
cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
Range: <=5.1.1

Patches

Vulnerability mechanics

References

3

twitter.com/4Dgifts/statuses/649589185792339968nvdPress/Media CoverageThird Party Advisory
www.securitytracker.com/id/1033725nvdThird Party AdvisoryVDB Entry
code.google.com/p/android/issues/detailnvdVendor Advisory

News mentions

0

No linked articles in our index yet.