CVE-2015-7718: Medium severity android vulnerability

Q: Which Android releases are affected?

The issue affects Android 5.x releases before 5.1.1 build LMY48T and Android 6.0 releases before the 2015-10-01 security update.

Q: What impact can an attacker achieve?

An attacker can cause the Android mediaserver process to crash, resulting in a denial of service. The provided data does not indicate confidentiality or integrity impact.

Q: Does exploitation require authentication or user interaction?

The vulnerability is rated network-accessible with low attack complexity and no authentication requirement. The provided data does not specify any user-interaction requirement or the exact attack vectors.

Q: How can I determine whether a device is exposed?

Check the device's Android version, build level, and security-update level. Devices running Android 5.x below 5.1.1 LMY48T or Android 6.0 without the 2015-10-01 update are affected according to the available information.

Published Oct 6, 2015

Updated

mediaserver in Android 5.x before 5.1.1 LMY48T and 6.0 before 2015-10-01 allows attackers to cause a denial of service (process crash) via unspecified vectors, aka internal bug 22278703, a different vulnerability than CVE-2015-6605.

Affected Software

1 affected component

Google Android<=5.1

Event History

Oct 6, 2015

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

Which Android releases are affected?

The issue affects Android 5.x releases before 5.1.1 build LMY48T and Android 6.0 releases before the 2015-10-01 security update.

What impact can an attacker achieve?

An attacker can cause the Android mediaserver process to crash, resulting in a denial of service. The provided data does not indicate confidentiality or integrity impact.

Does exploitation require authentication or user interaction?

The vulnerability is rated network-accessible with low attack complexity and no authentication requirement. The provided data does not specify any user-interaction requirement or the exact attack vectors.

How can I determine whether a device is exposed?

Check the device's Android version, build level, and security-update level. Devices running Android 5.x below 5.1.1 LMY48T or Android 6.0 without the 2015-10-01 update are affected according to the available information.

CVE-2015-7718: Medium severity android vulnerability

Affected Software

Event History

Frequently Asked Questions

Which Android releases are affected?

What impact can an attacker achieve?

Does exploitation require authentication or user interaction?

How can I determine whether a device is exposed?

Company

Resources

Contact

Frequently Asked Questions

Which Android releases are affected?

What impact can an attacker achieve?

Does exploitation require authentication or user interaction?

How can I determine whether a device is exposed?