cbcvebase.
CVE-2015-6626
published 2015-12-08

CVE-2015-6626: libstagefright in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to obtain sensitive information, and consequently bypass an…

PriorityP422medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
0.64%
47.0th percentile
libstagefright in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 24310423.

Affected

3 ranges
VendorProductVersion rangeFixed in
googleandroid
googleandroid
googleandroid>= 5.0 < 5.1.15.1.1
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.