CVE-2015-1538
Android < 5.1 - Remote Code Execution via MP4 Atom Integer Overflow
Title source: llmExploitation Summary
EIP tracks 8 public exploits for CVE-2015-1538. PoCs published by Joshua J. Drake, jduck, oguzhantopgul.
AI-analyzed exploit summary This exploit targets CVE-2015-1538, an integer overflow in libstagefright's MP4 'stsc' atom handling, leading to a heap overflow. It constructs a malicious MP4 file with a ROP chain and reverse shell payload for remote code execution on vulnerable Android devices.
Description
Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code via crafted atoms in MP4 data that trigger an unchecked multiplication, aka internal bug 20139950, a related issue to CVE-2015-4496.
Exploits (8)
This exploit targets CVE-2015-1538, an integer overflow in libstagefright's MP4 'stsc' atom handling, leading to a heap overflow. It constructs a malicious MP4 file with a ROP chain and reverse shell payload for remote code execution on vulnerable Android devices.
This is a functional exploit for CVE-2015-1538, targeting an integer overflow in the libstagefright MP4 'stsc' atom handling. It generates a malicious MP4 file to achieve remote code execution (RCE) as the media user on vulnerable Android devices.
This is a functional exploit for CVE-2015-1538, targeting an integer overflow in the libstagefright MP4 'stsc' atom handling in Android. It generates a malicious MP4 file to achieve remote code execution (RCE) via a reverse shell as the media user.
The repository contains a README.md file mentioning multiple CVEs, including CVE-2015-1538 (Stagefright RCE), but lacks actual exploit code or technical details. It appears to be a placeholder or incomplete writeup.
The repository contains a README file discussing CVE-2015-1538, a Stagefright vulnerability in Google Android, but lacks actual exploit code or technical details. It appears to be a placeholder or incomplete writeup.
This is a functional exploit for CVE-2015-1538, targeting an integer overflow in the libstagefright MP4 'stsc' atom handling. It generates a malicious MP4 file that triggers a heap overflow, leading to remote code execution (reverse shell) as the media user on vulnerable Android devices.
The repository contains a simple number-guessing game in Python, unrelated to CVE-2015-1538. No exploit code or vulnerability details are present.
This is a functional exploit for CVE-2015-1538, targeting an integer overflow in libstagefright's MP4 'stsc' atom handling. It generates a malicious MP4 file that can trigger remote code execution on vulnerable Android devices.