CVE-2015-7896
published 2017-08-24CVE-2015-7896: LibQJpeg in the Samsung Galaxy S6 before the October 2015 MR allows remote attackers to cause a denial of service (memory corruption and SIGSEGV) via a crafted…
PriorityP340medium6.5CVSS 3.0
AVNACLPRNUIRSUCNINAH
EXPLOIT
EPSS
6.96%
93.3th percentile
LibQJpeg in the Samsung Galaxy S6 before the October 2015 MR allows remote attackers to cause a denial of service (memory corruption and SIGSEGV) via a crafted image file.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| samsung | samsung_mobile | — | — |
| samsung | samsung_mobile | — | — |
| samsung | samsung_mobile | — | — |
| samsung | samsung_mobile | — | — |
| samsung | samsung_mobile | — | — |
| samsung | samsung_mobile | — | — |
| samsung | samsung_mobile | — | — |
| samsung | samsung_mobile | — | — |
| samsung | samsung_mobile | — | — |
| samsung | samsung_mobile | — | — |
| samsung | samsung_mobile | — | — |
CVSS provenance
nvdv3.06.5MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-j5r6-r9wj-mgmg: LibQJpeg in the Samsung Galaxy S6 before the October 2015 MR allows remote attackers to cause a denial of service (memory corruption and SIGSEGV) via
ghsa_unreviewed·2022-05-17
CVE-2015-7896 [MEDIUM] CWE-119 GHSA-j5r6-r9wj-mgmg: LibQJpeg in the Samsung Galaxy S6 before the October 2015 MR allows remote attackers to cause a denial of service (memory corruption and SIGSEGV) via
LibQJpeg in the Samsung Galaxy S6 before the October 2015 MR allows remote attackers to cause a denial of service (memory corruption and SIGSEGV) via a crafted image file.
Project0
Hack The Galaxy: Hunting Bugs in the Samsung Galaxy S6 Edge - Project Zero
project_zero·2015-11-01
CVE-2015-7888 Hack The Galaxy: Hunting Bugs in the Samsung Galaxy S6 Edge - Project Zero
Posted by Natalie Silvanovich, Planner of Bug Bashes
Recently, Project Zero researched a popular Android phone, the Samsung Galaxy S6 Edge. We discovered and reported 11 high-impact security issues as a result. This post discusses our motivations behind the research, our approach in looking for vulnerabilities on the device and what we learned by investigating it.
The majority of Android devices are not made by Google, but by external companies known as Original Equipment Manufacturers or OEMs which use the Android Open-Source Project (AOSP) as the basis for mobile devices which they manufacture. OEMs are an important area for Android security research, as they introduce additional (and possibly vulnerable) code into Android devices at all privilege levels, and they decide the frequenc
No detection rules found.
No writeups or analysis indexed.
http://packetstormsecurity.com/files/134198/Samsung-Galaxy-S6-LibQjpeg-DoIntegralUpsample-Crash.htmlhttp://www.securityfocus.com/bid/77425https://bugs.chromium.org/p/project-zero/issues/detail?id=498&redir=1https://www.exploit-db.com/exploits/38612/http://packetstormsecurity.com/files/134198/Samsung-Galaxy-S6-LibQjpeg-DoIntegralUpsample-Crash.htmlhttp://www.securityfocus.com/bid/77425https://bugs.chromium.org/p/project-zero/issues/detail?id=498&redir=1https://www.exploit-db.com/exploits/38612/
2017-08-24
Published