CVE-2015-6627
published 2015-12-08CVE-2015-6627: The Audio component in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to obtain sensitive information via a crafted audio file…
PriorityP48low2.6CVSS 2.0
AVNACHAuNCPINAN
EPSS
0.52%
41.5th percentile
The Audio component in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to obtain sensitive information via a crafted audio file, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 24211743.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| android | >= 5.0 < 5.1.1 | 5.1.1 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Android
CVE-2015-6627: Android Security Bulletin 2015-12-01
CVE: CVE-2015-6627
Severity: HIGH
Affected AOSP versions: 6
vendor_android·2015-12-01·CVSS 2.6
CVE-2015-6627 [LOW] CVE-2015-6627: Android Security Bulletin 2015-12-01
CVE: CVE-2015-6627
Severity: HIGH
Affected AOSP versions: 6
Android Security Bulletin 2015-12-01
CVE: CVE-2015-6627
Severity: HIGH
Affected AOSP versions: 6.0 and below
GHSA
GHSA-33rq-f7g6-jgqf: The Audio component in Android before 5
ghsa_unreviewed·2022-05-14
CVE-2015-6627 [LOW] CWE-200 GHSA-33rq-f7g6-jgqf: The Audio component in Android before 5
The Audio component in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to obtain sensitive information via a crafted audio file, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 24211743.
No detection rules found.
No writeups or analysis indexed.
2015-12-08
Published