CVE-2015-1538 PoC — Android Stagefright 数字错误漏洞

Source

https://github.com/niranjanshr13/Stagefright-cve-2015-1538-1

Associated Vulnerability

Title:Android Stagefright 数字错误漏洞 (CVE-2015-1538)
Description:Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code via crafted atoms in MP4 data that trigger an unchecked multiplication, aka internal bug 20139950, a related issue to CVE-2015-4496.

Description

Cve-2015-1538-1

Readme

# Stagefright-cve-2015-1538-1
Discovered by Joshua J. Drake (@jduck) of ZIMPERIUM zLabs and fixed his project by Niranjan Shrestha (@niranjanshr13).
Exploit for RCE Vulnerability CVE-2015-1538 #1
Integer Overflow in the libstagefright MP4 'stsc' atom handling
Don't forget, the output of "create_mp4" can be delivered many ways!
MMS is the most dangerous attack vector, but not the only one...

DISCLAIMER: This exploit is for testing and educational purposes only. Any other usage for this code is not allowed. Use at your own risk.
"With great power comes great responsibility." - Uncle Ben

File Snapshot


 [4.0K]  /data/pocs/0feeb01e44f6d4631d438c3d3cdb9bb8756209e5
├── [ 16K]  mp4.py
└── [ 593]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!