Candidate: CVE-2015-3842 PublicDate: 2015-10-01 00:59:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3842 https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ https://android.googlesource.com/platform/frameworks/av/+/aeea52da00d210587fb3ed895de3d5f2e0264c88 Description: Multiple heap-based buffer overflows in libeffects in the Audio Policy Service in mediaserver in Android before 5.1.1 LMY48I allow attackers to execute arbitrary code via a crafted application, aka internal bug 21953516. Ubuntu-Description: Notes: jdstrand> as with previous stagefright issues, this issue affects Ubuntu's android packages, but not in a way that is exposed to apps. See CVE-2015-1538 for details Bugs: Priority: negligible Discovered-by: Assigned-to: CVSS: Tags_android: apparmor Patches_android: upstream_android: needs-triage precise_android: DNE trusty_android: ignored trusty/esm_android: DNE (trusty was ignored) vivid_android: ignored vivid/stable-phone-overlay_android: ignored vivid/ubuntu-core_android: DNE wily_android: ignored devel_android: ignored