[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fgGhJRl6yM76PodwCUuEVpwTlWvJHYgOPL3SdZ0mcivY":3,"g5a-risk:CVE-2015-3864":131},{"success":4,"data":5,"meta":129},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":27,"epssPercentile":15,"epssTimeSeries":28,"severity":29,"affectedProducts":30,"affectedProductsCount":36,"references":37,"referencesCount":86,"weaknesses":87,"weaknessesCount":36,"isActivelyExploited":91,"cisaInfo":15,"otxData":15,"relatedBlogPosts":92,"seoMetadata":93,"configurations":118,"relatedVendorCves":127,"notableEvents":128},"CVE-2015-3864","What is CVE-2015-3864?","Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted MPEG-4 data, aka internal bug 23034759.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-3824.","Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allows rem...","2015-10-01T00:59:31.56","2025-04-12T10:46:40.837",10,"AV:N\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C",{"CVSSMetricV31":15,"CVSSMetricV30":15,"CVSSMetricV2":16,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"BaseSeverity":26,"ExploitabilityScore":12,"ImpactScore":12,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","NETWORK","LOW","NONE","COMPLETE","HIGH",0.87125,[27,27,27,27,27,27,27],"Critical",[31],{"vendor":32,"product":33,"version":34,"criteria":35,"vulnerable":4},"google","android","*","cpe:2.3:o:google:android:*:*:*:*:*:*:*:*",1,[38,42,47,53,56,60,64,67,70,72,74,76,78,80,82,84],{"url":39,"source":40,"tags":41},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F76682","Securityfocus",[],{"url":43,"source":44,"tags":45},"https:\u002F\u002Fandroid.googlesource.com\u002Fplatform\u002Fframeworks\u002Fav\u002F+\u002F6fe85f7e15203e48df2cc3e8e1c4bc6ad49dc968","Googlesource",[46],"Vendor Advisory",{"url":48,"source":49,"tags":50},"https:\u002F\u002Fblog.zimperium.com\u002Fcve-2015-3864-metasploit-module-now-available-for-testing\u002F","Zimperium",[51,52],"Release Notes","Third Party Advisory",{"url":54,"source":49,"tags":55},"https:\u002F\u002Fblog.zimperium.com\u002Freflecting-on-stagefright-patches\u002F",[],{"url":57,"source":58,"tags":59},"https:\u002F\u002Fgroups.google.com\u002Fforum\u002Fmessage\u002Fraw?msg=android-security-updates\u002F1M7qbSvACjo\u002FY7jewiW1AwAJ","Google",[46],{"url":61,"source":62,"tags":63},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F38226\u002F","Exploit-db",[],{"url":65,"source":62,"tags":66},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F39640\u002F",[],{"url":68,"source":62,"tags":69},"https:\u002F\u002Fwww.exploit-db.com\u002Fexploits\u002F40436\u002F",[],{"url":39,"source":40,"tags":71},[],{"url":43,"source":44,"tags":73},[46],{"url":48,"source":49,"tags":75},[51,52],{"url":54,"source":49,"tags":77},[],{"url":57,"source":58,"tags":79},[46],{"url":61,"source":62,"tags":81},[],{"url":65,"source":62,"tags":83},[],{"url":68,"source":62,"tags":85},[],16,[88],{"id":89,"name":89,"description":90},"Unknown","CWE-189",false,[],{"title":94,"metaDescription":95,"keywords":96,"canonicalUrl":97,"structuredData":98},"What is CVE-2015-3864? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2015-3864, a critical severity cyber security vulnerability from 2015. High exploit probability (87.1%). Integer underflow in t...","CVE-2015-3864, CVE-2015-3864 vulnerability, CVE-2015-3864 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2015, CVSS score, exploit, patch, remediation, google security, android vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2015-3864",{"@context":99,"@type":100,"headline":94,"description":95,"datePublished":10,"dateModified":11,"author":101,"publisher":105,"about":109,"mainEntityOfPage":113,"articleSection":116,"keywords":117},"https:\u002F\u002Fschema.org","TechArticle",{"@type":102,"name":103,"url":104},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":102,"name":103,"url":104,"logo":106},{"@type":107,"url":108},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":110,"name":6,"description":111,"additionalType":112},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":114,"@id":115},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2015-3864","Cybersecurity","CVE-2015-3864, CVE-2015-3864 vulnerability, CVE-2015-3864 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[119],{"Operator":15,"Negate":15,"Nodes":120},[121],{"Operator":122,"Negate":15,"CPEMatch":123},"OR",[124],{"Vulnerable":4,"Criteria":35,"MatchCriteriaID":125,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":126},"3573E693-716C-4B92-AC87-6466CBC26527","5.1",[],[],{"lastModified":11,"cacheTime":130,"version":21},1793204405220,{"score":132,"band":133,"action":134,"scoredAt":135},71,"High","Patch now","2026-10-28T06:39:50.734369+00:00"]