Lucene search

K
cve[email protected]CVE-2015-6620
HistoryDec 08, 2015 - 11:59 p.m.

CVE-2015-6620

2015-12-0823:59:04
CWE-264
web.nvd.nist.gov
23
cve-2015-6620
libstagefright
android
privilege escalation
nvd
security bug

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

23.3%

libstagefright in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bugs 24123723 and 24445127.

Affected configurations

NVD
Node
googleandroidRange5.05.1.1
OR
googleandroidMatch6.0

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

23.3%