CVE-2015-6627

Android < 5.1.1 LMY48Z and 6.0 < 2015-12-01 - Exposure of Sensitive Information via Crafted Audio File

Title source: llm
STIX 2.1

Description

The Audio component in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to obtain sensitive information via a crafted audio file, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 24211743.

References (1)

Core 1
Core References

Scores

EPSS 0.0052
EPSS Percentile 40.6%

Details

CWE
CWE-200
Status published
Products (2)
google/android 6.0
google/android 5.0 - 5.1.1
Published Dec 08, 2015
Tracked Since Feb 18, 2026