← Back

Android

android

Vendor: Google • 8,153 CVEs

CVEs (8,153)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-6606
1Google
1Android
May 6, 2026
Oct 6, 2015
N/A· v4
N/A· v3
9.3 HIGH· v2
The Secure Element Evaluation Kit (aka SEEK or SmartCard API) plugin in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSyst...Show more
The Secure Element Evaluation Kit (aka SEEK or SmartCard API) plugin in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 22301786.Show less
CVE-2015-6605
1Google
1Android
May 6, 2026
Oct 6, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
mediaserver in Android before 5.1.1 LMY48T allows attackers to cause a denial of service (process crash) via unspecified vectors, aka internal bugs 20915134 and 23142203, a different vulnerability than CVE-2015-7718.
CVE-2015-6604
1Google
1Android
May 6, 2026
Oct 6, 2015
N/A· v4
N/A· v3
10.0 HIGH· v2
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23129786.
CVE-2015-6603
1Google
1Android
May 6, 2026
Oct 6, 2015
N/A· v4
N/A· v3
10.0 HIGH· v2
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23227354.
CVE-2015-6601
1Google
1Android
May 6, 2026
Oct 6, 2015
N/A· v4
N/A· v3
10.0 HIGH· v2
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 22935234.
CVE-2015-6600
1Google
1Android
May 6, 2026
Oct 6, 2015
N/A· v4
N/A· v3
10.0 HIGH· v2
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 22882938.
CVE-2015-6599
1Google
1Android
May 6, 2026
Oct 6, 2015
N/A· v4
N/A· v3
10.0 HIGH· v2
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23416608.
CVE-2015-6598
1Google
1Android
May 6, 2026
Oct 6, 2015
N/A· v4
N/A· v3
10.0 HIGH· v2
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23306638.
CVE-2015-6596
1Google
1Android
May 6, 2026
Oct 6, 2015
N/A· v4
N/A· v3
9.3 HIGH· v2
mediaserver in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, aka internal bugs 20731946 and 20719651, a different vulnerability than CVE-2015-7717.
CVE-2015-3879
1Google
1Android
May 6, 2026
Oct 6, 2015
N/A· v4
N/A· v3
9.3 HIGH· v2
Media Player Framework in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, aka internal bug 23223325.
CVE-2015-3878
1Google
1Android
May 6, 2026
Oct 6, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Media Projection in Android 5.x before 5.1.1 LMY48T and 6.0 before 2015-10-01 allows attackers to bypass an intended screen-recording warning feature and obtain sensitive screen-snapshot information via a crafted applica...Show more
Media Projection in Android 5.x before 5.1.1 LMY48T and 6.0 before 2015-10-01 allows attackers to bypass an intended screen-recording warning feature and obtain sensitive screen-snapshot information via a crafted application that references a long application name, aka internal bug 23345192.Show less
CVE-2015-3877
1Google
1Android
May 6, 2026
Oct 6, 2015
N/A· v4
N/A· v3
10.0 HIGH· v2
Skia, as used in Android before 5.1.1 LMY48T, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 20723696.
CVE-2015-3875
1Google
1Android
May 6, 2026
Oct 6, 2015
N/A· v4
N/A· v3
10.0 HIGH· v2
libutils in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted audio file, aka internal bug 22952485.
CVE-2015-3874
1Google
1Android
May 6, 2026
Oct 6, 2015
N/A· v4
N/A· v3
10.0 HIGH· v2
The Sonivox components in Android before 5.1.1 LMY48T allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bugs 23335715, 23307276, and...Show more
The Sonivox components in Android before 5.1.1 LMY48T allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bugs 23335715, 23307276, and 23286323.Show less
CVE-2015-3873
1Google
1Android
May 6, 2026
Oct 6, 2015
N/A· v4
N/A· v3
10.0 HIGH· v2
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bugs 23016072, 23248776, 23247055, 2...Show more
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bugs 23016072, 23248776, 23247055, 22845824, 22008959, 21814993, 21048776, 20718524, 20674674, 22388975, 20674086, 21443020, and 22077698, a different vulnerability than CVE-2015-7716.Show less
CVE-2015-3872
1Google
1Android
May 6, 2026
Oct 6, 2015
N/A· v4
N/A· v3
10.0 HIGH· v2
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23346388.
CVE-2015-3871
1Google
1Android
May 6, 2026
Oct 6, 2015
N/A· v4
N/A· v3
10.0 HIGH· v2
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23031033.
CVE-2015-3870
1Google
1Android
May 6, 2026
Oct 6, 2015
N/A· v4
N/A· v3
10.0 HIGH· v2
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 22771132.
CVE-2015-3869
1Google
1Android
May 6, 2026
Oct 6, 2015
N/A· v4
N/A· v3
10.0 HIGH· v2
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23036083.
CVE-2015-3868
1Google
1Android
May 6, 2026
Oct 6, 2015
N/A· v4
N/A· v3
10.0 HIGH· v2
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23270724.