VDB

CVE-2015-3861

CVE-2015-3861 PUBLISHED CVSS 5 MEDIUM

Multiple integer overflows in the addVorbisCodecInfo function in matroska/MatroskaExtractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allow remote attackers to cause a denial of service (device inoperability) via crafted Matroska data, aka internal bug 21296336.

EPSS 0.82% · 55.6th percentile

Risk Scores

CVSS 2.0
5
EPSS Score
0.82%
55.6th percentile

Affected Products

VendorProductVersions
googleandroid0
n/an/an/a

Timeline

  • Oct 1, 2015 CVE Published
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • May 21, 2022 EPSS Score
  • Jul 13, 2022 EPSS Score
  • Sep 5, 2022 EPSS Score
  • Oct 28, 2022 EPSS Score
  • Dec 20, 2022 EPSS Score
  • Feb 11, 2023 EPSS Score
  • Apr 5, 2023 EPSS Score
  • May 28, 2023 EPSS Score
  • Jul 20, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›