CVE-2015-8074: Infoleak
Published Nov 3, 2015
·Updated
mediaserver in Android before 5.1.1 LMY48X allows remote attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors, aka internal bugs 23540907 and 23515142, a different vulnerability than CVE-2015-6611.
Affected Software
1 affected component
Google Android<=5.1
Event History
Nov 3, 2015
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-8074?
CVE-2015-8074 is classified as a medium severity vulnerability that allows for sensitive information exposure.
2
How do I fix CVE-2015-8074?
To mitigate CVE-2015-8074, updating Android to version 5.1.1 LMY48X or later is recommended.
3
What is the impact of CVE-2015-8074?
CVE-2015-8074 can allow remote attackers to bypass unspecified security protections and access sensitive data.
4
Which versions of Android are affected by CVE-2015-8074?
CVE-2015-8074 affects all versions of Android prior to 5.1.1 LMY48X.
5
Who can exploit CVE-2015-8074?
CVE-2015-8074 can be exploited by remote attackers potentially via several unknown vectors.