CVE-2015-6604

libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted…

published October 6, 2015

CVSS
—
EPSS
2%
Percentile
82.3
In the wild
Unconfirmed
What it is

⚠️ A crafty media file could turn your Android device into a playground for attackers! 📱 Think of libstagefright like a movie theater that lets anyone slip in a questionable reel, potentially leading to a chaotic screening — the curtain could drop at any moment! If exploited, an attacker could execute their own code or cause a denial of service, leading to unexpected crashes or potentially full control over your device. Imagine your phone just freezing up or behaving erratically at the most inconvenient time — absolutely frustrating!

Put simply

Think of libstagefright like a movie theater that lets anyone slip in a questionable reel, potentially leading to a chaotic screening — the curtain could drop at any moment! CVE-2015-6604 is a vulnerability in libstagefright, which allows remote attackers to execute arbitrary code or cause memory corruption through specially crafted media files. It’s like a sneaky script that bypasses the usual checks and wreaks havoc.

What to do

If exploited, an attacker could execute their own code or cause a denial of service, leading to unexpected crashes or potentially full control over your device. Imagine your phone just freezing up or behaving erratically at the most inconvenient time — absolutely frustrating! Update your Android device to version 5.1.1 LMY48T or later to patch this vulnerability. For the best protection, consistently check for system updates and avoid opening suspicious media files. 🛡️ You've got this! Keeping your device updated means you're standing strong against potential threats! 💪✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02200 · 82.3th percentile
Published
2015-10-06T17:00Z
EPSS history
Timeline
  • 06 OCT 17:00Z
    libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted…
    cvelistv5