CVE-2015-6633: Buffer Overflow
Published Dec 7, 2015
·Updated
The display drivers in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23987307.
Affected Software
3 affected components
Google Android>=5.0<5.1.1
Google Android=6.0
Google Android
Event History
Dec 7, 2015
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityAffected Software
Dec 8, 2015
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
Which Android versions are affected?
The issue affects Android versions before 5.1.1 build LMY48Z and Android 6.0 versions before the 2015-12-01 security update.
2
What does an attacker need to exploit this issue?
An attacker can trigger the vulnerability remotely by providing a crafted media file. No authentication is required according to the supplied CVSS vector.
3
What impact can successful exploitation have?
Successful exploitation can result in arbitrary code execution or a denial of service through memory corruption. The provided severity vector indicates potential impact to confidentiality, integrity, and availability.