PT-2015-2309
CVE-2015-7716
·
Publicado
2015-10-06
·
Atualizado
2015-10-07
Descrição por
CVSS 2.0
10
AltaMétricasAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Android versions prior to 5.1.1 LMY48T
Description
The issue is caused by a buffer overflow in the libstagefright component, allowing remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.
Recommendations
For Android versions prior to 5.1.1 LMY48T, update to version 5.1.1 LMY48T or later to resolve the issue. As a temporary workaround, consider restricting the use of media files from untrusted sources to minimize the risk of exploitation.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾