CVE-2015-6602
EPSS 3.2%
Description
libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a (1) MP3 or (2) MP4 file, as demonstrated by an attack against use of libutils by libstagefright in Android 5.x.
How to fix CVE-2015-6602
No fixed version has been published yet. Mitigate by removing the affected package or applying upstream guidance from the references below.
- Debian/android-platform-frameworks-native—no fix listed
Is CVE-2015-6602 being exploited?
Low — EPSS is 3.2%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0