Unscored CVE-2015-6609 EUVD-2015-6547GHSA-v37x-pxxv-r99p

libutils in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of se…

Published Nov 3, 2015 · Updated Aug 6, 2024 · Assigned by google_android

Package: android Package: android-platform-frameworks-native Ecosystem: Debian Ecosystem: Ubuntu

Description

libutils in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted audio file, aka internal bug 22953624.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 12	android-platform-frameworks-native	No fix yet	—

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 16.04 LTS	android	No fix yet	—

References

[android-security-updates] 20151102 Nexus Security Bulletin (November 2015) mailing-list
1034049 vdb-entry