CVE-2015-8073
published 2015-11-03CVE-2015-8073: mediaserver in Android 4.4 and 5.1 before 5.1.1 LMY48X allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a…
PriorityP341critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
2.22%
80.7th percentile
mediaserver in Android 4.4 and 5.1 before 5.1.1 LMY48X allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 14388161, a different vulnerability than CVE-2015-6608 and CVE-2015-8072.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | >= 5.0 < 5.1.1 | 5.1.1 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-3x2j-v2vh-g7rm: mediaserver in Android 4
ghsa_unreviewed·2022-05-17·CVSS 10.0
CVE-2015-8073 [CRITICAL] CWE-119 GHSA-3x2j-v2vh-g7rm: mediaserver in Android 4
mediaserver in Android 4.4 and 5.1 before 5.1.1 LMY48X allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 14388161, a different vulnerability than CVE-2015-6608 and CVE-2015-8072.
GHSA
GHSA-m2c8-hrr6-jw4g: mediaserver in Android 4
ghsa_unreviewed·2022-05-17·CVSS 10.0
CVE-2015-8072 [CRITICAL] CWE-119 GHSA-m2c8-hrr6-jw4g: mediaserver in Android 4
mediaserver in Android 4.4 through 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23881715, a different vulnerability than CVE-2015-6608 and CVE-2015-8073.
GHSA
GHSA-qf97-whfx-pq78: mediaserver in Android 5
ghsa_unreviewed·2022-05-14·CVSS 10.0
CVE-2015-6608 [CRITICAL] CWE-119 GHSA-qf97-whfx-pq78: mediaserver in Android 5
mediaserver in Android 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bugs 19779574, 23680780, 23876444, and 23658148, a different vulnerability than CVE-2015-8072 and CVE-2015-8073.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2015-11-03
Published