CVE-2015-6612
Android < 5.1.1 LMY48X and 6.0 < 2015-11-01 - Privilege Escalation via libmedia
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2015-6612. PoCs published by secmob, flankerhqd.
AI-analyzed exploit summary This PoC exploits a buffer overflow vulnerability in Android's mediaserver component (CVE-2015-6612) by manipulating the `mNumBytesOfClearData` field in a `CryptoPlugin::SubSample` structure, leading to a controlled heap overflow. The exploit targets the `decrypt` function in the `ICrypto` interface, potentially causing a denial-of-service or remote code execution.
Description
libmedia in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to gain privileges via a crafted application, aka internal bug 23540426.
Exploits (2)
This PoC exploits a buffer overflow vulnerability in Android's mediaserver component (CVE-2015-6612) by manipulating the `mNumBytesOfClearData` field in a `CryptoPlugin::SubSample` structure, leading to a controlled heap overflow. The exploit targets the `decrypt` function in the `ICrypto` interface, potentially causing a denial-of-service or remote code execution.
This repository contains minimal instructions for compiling a POC for CVE-2015-6612, a vulnerability in Android's media framework. No actual exploit code is provided, only build instructions.