CVE-2015-6617

Skia, as used in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01, allows remote attackers to execute arbitrary code or cause a denial of service (memory…

published December 8, 2015

CVSS
—
EPSS
2%
Percentile
82.8
In the wild
Unconfirmed
What it is

⚠️ A crafty media file can trigger this vulnerability in Skia used by Android, allowing attackers to execute arbitrary code or cause memory corruption. 🔥 Think of it like a restaurant serving a dish that looks delicious, but one sneaky ingredient could cause a major headache for the chef. If the kitchen staff isn’t careful, they could end up serving something that ruins the meal entirely! If exploited, this vulnerability could lead an attacker to run arbitrary code on the device or crash it entirely, leading to a denial of service. This could mean unwanted access to sensitive information or simply making your device unusable, which is absolutely devastating!

Put simply

Think of it like a restaurant serving a dish that looks delicious, but one sneaky ingredient could cause a major headache for the chef. If the kitchen staff isn’t careful, they could end up serving something that ruins the meal entirely! This vulnerability in Skia allows remote attackers to execute arbitrary code or crash the system via a specially crafted media file, which causes memory corruption when processed.

What to do

If exploited, this vulnerability could lead an attacker to run arbitrary code on the device or crash it entirely, leading to a denial of service. This could mean unwanted access to sensitive information or simply making your device unusable, which is absolutely devastating! To protect your device, ensure you’re running Android version 5.1.1 LMY48Z or later, or update to the latest security patches. Regularly check for software updates to keep your system secure and functioning smoothly. You've got this! Stay vigilant and keep your device secure with those updates! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02270 · 82.8th percentile
Published
2015-12-08T23:00Z
EPSS history
Timeline
  • 08 DEC 23:00Z
    Skia, as used in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01, allows remote attackers to execute arbitrary code or cause a denial of service (memory…
    cvelistv5