CVE-2015-6617

Skia, as used in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23648740.

• CWE-119

• http://source.android.com/security/bulletin/2015-12-01.htmlVendor Advisory
• http://www.securitytracker.com/id/1034592Third Party Advisory, VDB Entry
• http://source.android.com/security/bulletin/2015-12-01.htmlVendor Advisory
• http://www.securitytracker.com/id/1034592Third Party Advisory, VDB Entry

Published

Dec 8, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-6610libstagefright in Android before 5.1.1 LMY48X and 6.0 before…
• CVE-2015-6611mediaserver in Android before 5.1.1 LMY48X and 6.0 before 20…
• CVE-2015-6612libmedia in Android before 5.1.1 LMY48X and 6.0 before 2015-…
• CVE-2015-6613Bluetooth in Android before 5.1.1 LMY48X and 6.0 before 2015…
• CVE-2015-6614Telephony in Android 5.x before 5.1.1 LMY48X allows attacker…
• CVE-2015-6616mediaserver in Android before 5.1.1 LMY48Z and 6.0 before 20…
• CVE-2015-6618Bluetooth in Android 4.4 and 5.x before 5.1.1 LMY48Z allows …
• CVE-2015-6619The kernel in Android before 5.1.1 LMY48Z and 6.0 before 201…
• CVE-2015-6620libstagefright in Android before 5.1.1 LMY48Z and 6.0 before…
• CVE-2015-6621SystemUI in Android 5.x before 5.1.1 LMY48Z and 6.0 before 2…
• CVE-2015-6622The Native Frameworks Library in Android before 5.1.1 LMY48Z…
• CVE-2015-6623Wi-Fi in Android 6.0 before 2015-12-01 allows attackers to g…