[Android Q&A, Help & Troubleshooting] Charlie R.:
Removal of Stagefright Libraries.

The Zimperium CVEs focus mostly on the mp4 codec:

CVE-2015-1538, P0006, ‘stsc’ MP4 Atom Integer Overflow Remote Code Execution

CVE-2015-1538, P0004, ‘ctts’ MP4 Atom Integer Overflow Remote Code Execution

CVE-2015-1538, P0004, ‘stts’ MP4 Atom Integer Overflow Remote Code Execution

CVE-2015-1538, P0004, ‘stss’ MP4 Atom Integer Overflow Remote Code Execution

CVE-2015-1539, P0007, ‘esds’ MP4 Atom Integer Underflow Remote Code Execution

CVE-2015-3827, P0008, ‘covr’ MP4 Atom Integer Underflow Remote Code Execution

CVE-2015-3826, P0009, 3GPP Metadata Buffer Overread

CVE-2015-3828, P0010, 3GPP Integer Underflow Remote Code Execution

CVE-2015-3824, P0011, ‘tx3g’ MP4 Atom Integer Overflow Remote Code Execution

CVE-2015-3829, P0012, ‘covr’ MP4 Atom Integer Overflow Remote Code Execution

I have disabled Stagefright in build.prop, but assertion here that this does not help you at all, so I set out to prevent linkage to Stagefright mp4.

Bearing the mp4 focus in mind, I have removed all permissions on the Stagefright video codecs (h.264 and WebM as well). This has not impacted the Zimperium scanner, but any applications attempting to dlopen() these libraries will crash. I've rebooted several times with no ill effects.

I would like to remove all of these libraries, but I was rather concerned about a boot loop.

u0_a252@t0ltevzw:/ $ su -

root@t0ltevzw:/ # mount -o remount,rw /system

root@t0ltevzw:/ # cd /system/lib

root@t0ltevzw:/system/lib # ls -l libstagefright*

-rw-r--r-- root root 1383864 2008-08-01 07:00 libstagefright.so

-rw-r--r-- root root 50232 2008-08-01 07:00 libstagefright_amrnb_common.so

-rw-r--r-- root root 21508 2008-08-01 07:00 libstagefright_avc_common.so

-rw-r--r-- root root 54488 2008-08-01 07:00 libstagefright_chromium_http.so

-rw-r--r-- root root 5128 2008-08-01 07:00 libstagefright_enc_common.so

-rw-r--r-- root root 70864 2008-08-01 07:00 libstagefright_foundation.so

-rw-r--r-- root root 107680 2008-08-01 07:00 libstagefright_httplive.so

-rw-r--r-- root root 115992 2008-08-01 07:00 libstagefright_omx.so

-rw-r--r-- root root 222636 2008-08-01 07:00 libstagefright_soft_aacdec.so

-rw-r--r-- root root 275628 2008-08-01 07:00 libstagefright_soft_aacenc.so

-rw-r--r-- root root 91312 2008-08-01 07:00 libstagefright_soft_amrdec.so

-rw-r--r-- root root 58480 2008-08-01 07:00 libstagefright_soft_amrnbenc.so

-rw-r--r-- root root 118380 2008-08-01 07:00 libstagefright_soft_amrwbenc.so

-rw-r--r-- root root 129248 2008-08-01 07:00 libstagefright_soft_flacenc.so

-rw-r--r-- root root 13372 2008-08-01 07:00 libstagefright_soft_g711dec.so

-rw-r--r-- root root 25812 2008-08-01 07:00 libstagefright_soft_gsmdec.so

-rw-r--r-- root root 111932 2008-08-01 07:00 libstagefright_soft_h264dec.so

-rw-r--r-- root root 91248 2008-08-01 07:00 libstagefright_soft_h264enc.so

-rw-r--r-- root root 62576 2008-08-01 07:00 libstagefright_soft_mp3dec.so

-rw-r--r-- root root 87152 2008-08-01 07:00 libstagefright_soft_mpeg4dec.so

-rw-r--r-- root root 119920 2008-08-01 07:00 libstagefright_soft_mpeg4enc.so

-rw-r--r-- root root 13372 2008-08-01 07:00 libstagefright_soft_rawdec.so

-rw-r--r-- root root 17468 2008-08-01 07:00 libstagefright_soft_vorbisdec.so

-rw-r--r-- root root 197880 2008-08-01 07:00 libstagefright_soft_vpxdec.so

-rw-r--r-- root root 234712 2008-08-01 07:00 libstagefright_soft_vpxenc.so

-rw-r--r-- root root 222416 2008-08-01 07:00 libstagefright_wfd.so

-rw-r--r-- root root 9272 2008-08-01 07:00 libstagefright_yuv.so

-rw-r--r-- root root 5228 2008-08-01 07:00 libstagefrighthw.so

root@t0ltevzw:/system/lib # chmod 000 libstagefright_soft_mpeg4*

root@t0ltevzw:/system/lib # chmod 000 libstagefright_soft_h264*

root@t0ltevzw:/system/lib # chmod 000 libstagefright_soft_vpx*

root@t0ltevzw:/system/lib # ls -l libstagefright_soft_mpeg* libstagefright_soft_h264*

---------- root root 87152 2008-08-01 07:00 libstagefright_soft_mpeg4dec.so

---------- root root 119920 2008-08-01 07:00 libstagefright_soft_mpeg4enc.so

---------- root root 111932 2008-08-01 07:00 libstagefright_soft_h264dec.so

---------- root root 91248 2008-08-01 07:00 libstagefright_soft_h264enc.so

root@t0ltevzw:/system/lib # mkdir bad

root@t0ltevzw:/system/lib # mv libstagefright_soft_mpeg4* bad

root@t0ltevzw:/system/lib # mv libstagefright_soft_h264* bad

root@t0ltevzw:/system/lib # mv libstagefright_soft_vpx* bad

root@t0ltevzw:/system/lib # cd /

root@t0ltevzw:/ # mount -o remount,ro /system

root@t0ltevzw:/ # exit