CVE-2015-8505

Android < 5.1.1 - Remote Code Execution via Crafted Media File

Title source: llm
STIX 2.1

Description

mediaserver in Android before 5.1.1 LMY48Z allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 17769851, a different vulnerability than CVE-2015-6616, CVE-2015-8506, and CVE-2015-8507.

References (1)

Core 1
Core References

Scores

EPSS 0.0199
EPSS Percentile 78.3%

Details

CWE
CWE-119
Status published
Products (1)
google/android < 5.1
Published Dec 08, 2015
Tracked Since Feb 18, 2026