CVE-2015-6608
published 2015-11-03CVE-2015-6608: mediaserver in Android 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory…
PriorityP343critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
2.36%
81.9th percentile
mediaserver in Android 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bugs 19779574, 23680780, 23876444, and 23658148, a different vulnerability than CVE-2015-8072 and CVE-2015-8073.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | >= 5.0 < 5.1.1 | 5.1.1 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Android
CVE-2015-6608: Android Security Bulletin 2015-11-01
CVE: CVE-2015-6608
Severity: CRITICAL
Affected AOSP versions: 5
vendor_android·2015-11-01·CVSS 10.0
CVE-2015-6608 [CRITICAL] CVE-2015-6608: Android Security Bulletin 2015-11-01
CVE: CVE-2015-6608
Severity: CRITICAL
Affected AOSP versions: 5
Android Security Bulletin 2015-11-01
CVE: CVE-2015-6608
Severity: CRITICAL
Affected AOSP versions: 5.0, 5.1, 6.0
GHSA
GHSA-3x2j-v2vh-g7rm: mediaserver in Android 4
ghsa_unreviewed·2022-05-17·CVSS 10.0
CVE-2015-8073 [CRITICAL] CWE-119 GHSA-3x2j-v2vh-g7rm: mediaserver in Android 4
mediaserver in Android 4.4 and 5.1 before 5.1.1 LMY48X allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 14388161, a different vulnerability than CVE-2015-6608 and CVE-2015-8072.
GHSA
GHSA-m2c8-hrr6-jw4g: mediaserver in Android 4
ghsa_unreviewed·2022-05-17·CVSS 10.0
CVE-2015-8072 [CRITICAL] CWE-119 GHSA-m2c8-hrr6-jw4g: mediaserver in Android 4
mediaserver in Android 4.4 through 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23881715, a different vulnerability than CVE-2015-6608 and CVE-2015-8073.
GHSA
GHSA-qf97-whfx-pq78: mediaserver in Android 5
ghsa_unreviewed·2022-05-14·CVSS 10.0
CVE-2015-6608 [CRITICAL] CWE-119 GHSA-qf97-whfx-pq78: mediaserver in Android 5
mediaserver in Android 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bugs 19779574, 23680780, 23876444, and 23658148, a different vulnerability than CVE-2015-8072 and CVE-2015-8073.
No detection rules found.
No public exploits indexed.
2015-11-03
Published