Download Firefox

Firefox is no longer supported on Windows 8.1 and below.

Please download Firefox ESR (Extended Support Release) to use Firefox.

Firefox is no longer supported on macOS 10.14 and below.

Please download Firefox ESR (Extended Support Release) to use Firefox.

Firefox Privacy Notice

Mozilla Foundation Security Advisory 2015-55

Buffer overflow and out-of-bounds read while parsing MP4 video metadata

Announced
May 12, 2015
Reporter
laf.intel
Impact
High
Products
Firefox, Firefox OS, SeaMonkey
Fixed in
  • Firefox 38
  • Firefox OS 2.2
  • SeaMonkey 2.35

Description

Security researcher laf.intel reported a buffer overflow and out-of-bounds read in the libstagefright library while parsing invalid metadata in MPEG4 video files. This can lead to a potentially exploitable crash.

References