CVE-2015-6607 SQLite before 3.8.9, as used in Android before 5.1.1 LMY48T, allows attackers to gain privileges via a crafted application, aka internal bug 20099586.
MediumCVSS 6.8
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQLite before 3.8.9, as used in Android before 5.1.1 LMY48T, allows attackers to gain privileges via a crafted application, aka internal bug 20099586.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| SQLite | <= 3.8.8.3 | No fix listed |
References
- 76970 vdb-entry
- android-review.googlesource.com vendor-advisory
- [android-security-updates] 20151005 Nexus Security Bulletin (October 2015) mailing-list vendor-advisory