CVE-2015-8073: Buffer Overflow

Published Nov 3, 2015

Updated

mediaserver in Android 4.4 and 5.1 before 5.1.1 LMY48X allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 14388161, a different vulnerability than CVE-2015-6608 and CVE-2015-8072.

Affected Software

2 affected components

Google Android=4.4

Google Android=5.1

Event History

Nov 3, 2015

CVE Published

via MITRE·11:00 AM

Data Sourced

via MITRE·11:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-8073?

CVE-2015-8073 is rated as high severity due to its potential to allow remote code execution and denial of service.

How do I fix CVE-2015-8073?

To mitigate CVE-2015-8073, updating to Android version 5.1.1 LMY48X or later is recommended.

What software versions are affected by CVE-2015-8073?

CVE-2015-8073 affects Android versions 4.4 and 5.1 before 5.1.1 LMY48X.

What types of attacks does CVE-2015-8073 enable?

CVE-2015-8073 allows remote attackers to execute arbitrary code or cause a denial of service through crafted media files.

Is CVE-2015-8073 a single vulnerability or related to others?

CVE-2015-8073 is a distinct vulnerability, separate from CVE-2015-6608 and CVE-2015-8072.