Description
mediaserver in Android before 5.1.1 LMY48X allows remote attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors, aka internal bugs 23540907 and 23515142, a different vulnerability than CVE-2015-6611.
References (1)
Core 1
Core References
Vendor Advisory mailing-list
x_refsource_mlist
https://groups.google.com/forum/message/raw?msg=android-security-updates/n1aw2MGce4E/jhpVEWDUCAAJ
Scores
EPSS
0.0095
EPSS Percentile
56.8%
Details
CWE
CWE-200
Status
published
Products (1)
google/android
< 5.1
Published
Nov 03, 2015
Tracked Since
Feb 18, 2026