CVE-2015-6608

mediaserver in Android 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bugs 19779574, 23680780, 23876444, and 23658148, a different vulnerability than CVE-2015-8072 and CVE-2015-8073.

• CWE-119

• http://www.securitytracker.com/id/1034049Third Party Advisory, VDB Entry
• https://groups.google.com/forum/message/raw?msg=android-security-updates/n1aw2MGce4E/jhpVEWDUCAAJVendor Advisory
• http://www.securitytracker.com/id/1034049Third Party Advisory, VDB Entry
• https://groups.google.com/forum/message/raw?msg=android-security-updates/n1aw2MGce4E/jhpVEWDUCAAJVendor Advisory

Published

Nov 3, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-6602libutils in Android through 5.1.1 LMY48M allows remote attac…
• CVE-2015-6603libstagefright in Android before 5.1.1 LMY48T allows remote …
• CVE-2015-6604libstagefright in Android before 5.1.1 LMY48T allows remote …
• CVE-2015-6605mediaserver in Android before 5.1.1 LMY48T allows attackers …
• CVE-2015-6606The Secure Element Evaluation Kit (aka SEEK or SmartCard API…
• CVE-2015-6607SQLite before 3.8.9, as used in Android before 5.1.1 LMY48T,…
• CVE-2015-6609libutils in Android before 5.1.1 LMY48X and 6.0 before 2015-…
• CVE-2015-6610libstagefright in Android before 5.1.1 LMY48X and 6.0 before…
• CVE-2015-6611mediaserver in Android before 5.1.1 LMY48X and 6.0 before 20…
• CVE-2015-6612libmedia in Android before 5.1.1 LMY48X and 6.0 before 2015-…
• CVE-2015-6613Bluetooth in Android before 5.1.1 LMY48X and 6.0 before 2015…
• CVE-2015-6614Telephony in Android 5.x before 5.1.1 LMY48X allows attacker…