CVE-2015-6609
HighSummary
The libutils library in Android before version 5.1.1 LMY48X and 6.0 before November 1, 2015, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted audio file.
Risk Assessment
This vulnerability could lead to remote code execution, posing a significant security threat to devices and user data.
Recommendation
It is recommended to update the Android system to the latest version to mitigate this vulnerability and reduce the risk of attacks.
Other vulnerabilities in libutils
See all- CVE-2017-0841High
A remote code execution vulnerability exists in the Android system (libutils). Affects Android versions from 5.0.2 to 8.0.
- CVE-2016-3861High
LibUtils in Android versions 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 mishandles conversions between Unicode character encodings with different encoding widths, allowing remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted file.
- CVE-2015-3875High
libutils in Android before version 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted audio file.
- CVE-2015-6602High
libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a (1) MP3 or (2) MP4 file.
Original NVD description (English source)
libutils in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted audio file, aka internal bug 22953624.