Android vulnerability related with stagefright

FangHui — Fri, 07 Aug 2015 07:19:17 GMT

There are several vulnerabilities been found recently as below:

ZIMPERIUM’s report:http://jiveon.jivesoftware.com/mpss/c/7gA/PDcDAA/t.1p4/5z0zjG0pTd2TX1EnZDdFDQ/h3/hAMy2Th8Lsdoz-2BI-2B-2B4FlQpxshE-2Fm9XH3UWXhoYdrt6y4Crt0q1GUsW8pizm7YGWnxGc52SR4U4vCgooHeqoe1S9fu9dc4l1m2ew0Kz-2BSCbA-3D

They are reported as CVE-2015-1538, CVE-2015-1539, CVE-2015-3824, CVE-2015-3826, CVE-2015-3827, CVE-2015-3828 and CVE-2015-3829.

Trendmicro’s report:http://blog.trendmicro.com/trendlabs-security-intelligence/trend-micro-discovers-vulnerability-that-renders-android-devices-silent/

All above vulnerabilities are related with stagefright’s stackoverflow, which exist all android version since JellyBean 4.2. The stagefright is the default Multimedia framework in Android’s AOSP source code.

To avoid attacking toward stagefright, it is recommended to have patches in this attach, which should be applied to myandroid/frameworks/av.

Reference:

https://github.com/WhisperSystems/TextSecure/issues/3817

Original Attachment has been moved to: kitkat-stagefright-patch.7z.zip

Re: Android vulnerability related with stagefright

matthiasschaff — Tue, 18 Aug 2015 11:08:30 GMT

will there also be a patch for older versions? Like JB or ICS?

i.MX ProcessorsのトピックRe: Android vulnerability related with stagefright

Android vulnerability related with stagefright

Re: Android vulnerability related with stagefright