CVE-2015-6608

Android 5.x < 5.1.1 LMY48X and 6.0 < 2015-11-01 - Remote Code Execution via Crafted Media File

Title source: llm

Description

mediaserver in Android 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bugs 19779574, 23680780, 23876444, and 23658148, a different vulnerability than CVE-2015-8072 and CVE-2015-8073.

References (2)

Core 2

Core References

Vendor Advisory mailing-list x_refsource_mlist

https://groups.google.com/forum/message/raw?msg=android-security-updates/n1aw2MGce4E/jhpVEWDUCAAJ

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1034049

Scores

EPSS 0.0236

EPSS Percentile 81.7%

Details

CWE

CWE-119

Status published

Products (2)

google/android 6.0

google/android 5.0 - 5.1.1

Published Nov 03, 2015

Tracked Since Feb 18, 2026