Stagefrightened?
Project Zero's Mark Brand published a working exploit for CVE-2015-3864, a libstagefright flaw in Android's handling of 'tx3g' chunks in MPEG4 files, demonstrating it on Android 5.0+ on a Nexus 5. The September patch checked chunk_size against SIZE_MAX but...