CVE-2015-3862

Published: 6 October 2015

mediaserver in Android before 5.1.1 LMY48T allows attackers to cause a denial of service (process crash) via unspecified vectors, aka internal bug 22954006.

Notes

mediaserver crasher so DoS only
crash in malformed ID3 parsing

as with previous stagefright issues, this issue affects Ubuntu's
android packages, but not in a way that is exposed to apps.  See
CVE-2015-1538 for details

Status

References

• https://groups.google.com/forum/#!topic/android-security-updates/iv1BF0f0XY4
• https://android.googlesource.com/platform/frameworks/av/+/f26400c9d01a0e2f71690d5ebc644270f098d590%5E!/#F0
• https://www.cve.org/CVERecord?id=CVE-2015-3862
• NVD
• Launchpad
• Debian