CVE-2015-6602
HighSummary
libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a (1) MP3 or (2) MP4 file.
Risk Assessment
Attackers can exploit this vulnerability to remotely execute malicious code, potentially leading to device takeover or data theft.
Recommendation
It is recommended to update Android to the latest version to mitigate this vulnerability and to monitor devices for unusual activity.
Other vulnerabilities in libutils
See all- CVE-2017-0841High
A remote code execution vulnerability exists in the Android system (libutils). Affects Android versions from 5.0.2 to 8.0.
- CVE-2016-3861High
LibUtils in Android versions 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 mishandles conversions between Unicode character encodings with different encoding widths, allowing remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted file.
- CVE-2015-6609High
The libutils library in Android before version 5.1.1 LMY48X and 6.0 before November 1, 2015, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted audio file.
- CVE-2015-3875High
libutils in Android before version 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted audio file.
Original NVD description (English source)
libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a (1) MP3 or (2) MP4 file, as demonstrated by an attack against use of libutils by libstagefright in Android 5.x.