Back to all categorys

Remote Code Execution Vulnerability in Skia

CVE-2015-3877

(json)

• CVE numbers: CVE-2015-3877 [Bulletin-CVE-2015-3877]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Skia
• Details: Skia, as used in Android before 5.1.1 LMY48T, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 20723696. [NIST-CVE-2015-3877]
• Discovered by: on: Unknown
• Reported on: 2015-10-01 [Bulletin-CVE-2015-3877]
• Fixed on: 2015-04-16 [ANDROID-20723696]
• Fix released on: Unknown
• Affected versions: 5.1 and below [Bulletin-CVE-2015-3877] regex: ([1-4].[0-9].[0-9])|(5.[0-1].[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2015-3877]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-29

CVE-2015-6617

(json)

• CVE numbers: CVE-2015-6617 [Bulletin-CVE-2015-6617]
• Coordinated disclosure?: unknown
• Categories: Remote Code Execution Vulnerability in Skia
• Details: Skia, as used in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23648740. [NIST-CVE-2015-6617]
• Discovered by: on: Unknown
• Reported on: 2015-12-01 [Bulletin-CVE-2015-6617]
• Fixed on: 2015-08-06 [ANDROID-23648740]
• Fix released on: Unknown
• Affected versions: 6.0 and below [Bulletin-CVE-2015-6617] regex: ([1-5].[0-9].[0-9])|(6.0.[0-9])
• Affected devices:
• Affected manufacturers: all [Bulletin-CVE-2015-6617]
• Fixed versions: 6.0 and below [Bulletin-CVE-2015-6617]
• Submission: by: Daniel Carter, on: 2019-07-29