CVE-2015-3875

libutils in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted audio…

published October 6, 2015

CVSS
—
EPSS
2%
Percentile
80.8
In the wild
Unconfirmed
What it is

⚠️ A crafted audio file is all it takes to trigger this vulnerability. It’s like playing a song that suddenly rewrites the playlist! 🎶 Think of it as a music library that, instead of just playing the tracks you choose, decides to rework the entire catalog based on one unknown song — a sneaky remix that could lead to unexpected tunes or worse, silence altogether! An attacker could potentially execute arbitrary code or crash the device, leading to a frustrating experience or denial of service. Just imagine your phone hanging up mid-call or freezing while you’re trying to enjoy your favorite jam — absolutely devastating!

Put simply

Think of it as a music library that, instead of just playing the tracks you choose, decides to rework the entire catalog based on one unknown song — a sneaky remix that could lead to unexpected tunes or worse, silence altogether! This vulnerability in libutils on Android before version 5.1.1 allows remote attackers to exploit memory corruption via specially crafted audio files, which could facilitate arbitrary code execution or a denial of service.

What to do

An attacker could potentially execute arbitrary code or crash the device, leading to a frustrating experience or denial of service. Just imagine your phone hanging up mid-call or freezing while you’re trying to enjoy your favorite jam — absolutely devastating! To protect your devices, update to Android version 5.1.1 LMY48T or later immediately. Encourage users to be cautious of unsolicited audio files and educate them on safe media practices. You’ve got this! Stay vigilant, update your devices, and keep the tunes flowing safely! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02020 · 80.8th percentile
Published
2015-10-06T17:00Z
EPSS history
Timeline
  • 06 OCT 17:00Z
    libutils in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted audio…
    cvelistv5