CVE-2015-3864
Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in...
Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted MPEG-4 data, aka internal bug 23034759. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3824.
Exploit likelihood
What each source reports
NVD Score used
Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted MPEG-4 data, aka internal bug 23034759. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3824.
- Record
CVE-2015-3864- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted MPEG-4 data, aka internal bug 23034759. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3824.
- Record
CVE-2015-3864- Updated
- 2026-11-02
EUVDEUVD-2015-3900 No score
Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted MPEG-4 data, aka internal bug 23034759. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3824.
- Record
EUVD-2015-3900- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9pwf-jxj3-pf4m No score
Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in...
Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted MPEG-4 data, aka internal bug 23034759. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3824.
- Record
GHSA-9pwf-jxj3-pf4m- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Google Android - libstagefright Integer Overflow Remote Code Execution | 2015-09-17 |
| Exploit-DB | Google Android 5.0.1 - Metaphor Stagefright (ASLR Bypass) | 2016-03-30 |
| Exploit-DB | Google Android 5.0 < 5.1.1 - 'Stagefright' .MP4 tx3g Integer Overflow (Metasploit) | 2016-09-27 |
| Metasploit | Android Stagefright MP4 tx3g Integer Overflow | 2015-08-13 |
| PoC in GitHub | Bhathiya404/Exploiting-Stagefright-Vulnerability-CVE-2015-3864 | 2023-02-09 |
| PoC in GitHub | Cmadhushanka/CVE-2015-3864-Exploitation | 2024-07-10 |
| PoC in GitHub | HenryVHuang/CVE-2015-3864 | 2016-09-30 |
| PoC in GitHub | eudemonics/scaredycat | 2015-12-08 |
| PoC in GitHub | pwnaccelerator/stagefright-cve-2015-3864 | 2015-08-18 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-3864 is a high vulnerability (CVSS 10.0) in Google Android, published October 1, 2015. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 87.1%, the 99th percentile. No source names a fixed version.
References
groups.google.com/forum/message/raw?msg=android-security-updates/1M7qbSvACjo/Y7jewiW1AwAJ
blog.zimperium.com/cve-2015-3864-metasploit-module-now-available-for-testing
android.googlesource.com/platform/frameworks/av/+/6fe85f7e15203e48df2cc3e8e1c4bc6ad49dc968
exploit-db.com/exploits/38226
securityfocus.com/bid/76682