CVE-2015-6616 mediaserver in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka in...
HighCVSS 9.3
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
mediaserver in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bugs 24630158 and 23882800, a different vulnerability than CVE-2015-8505, CVE-2015-8506, and CVE-2015-8507.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Android | >= 5.0, < 5.1.1 | 5.1.1 |
| Google Android | = 6.0 | No fix listed |
References
- source.android.com vendor-advisory