Skip to content

Commit 70c5abf

Browse files
committed
update vuln map for 6616
1 parent d61dd3d commit 70c5abf

File tree

2 files changed

+27
-3
lines changed

2 files changed

+27
-3
lines changed

app/src/main/assets/vuln_map.json

Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -507,5 +507,29 @@
507507
"https://android.googlesource.com/platform%2Fframeworks%2Fav/+/3878b990f7d53eae7c2cf9246b6ef2db5a049872"
508508
],
509509
"cvedate": "09/30/2015"
510+
},
511+
"CVE-2015-6616": {
512+
"cve": "CVE-2015-6616",
513+
"altnames": [
514+
"ANDROID-24630158",
515+
"ANDROID-23882800",
516+
"ANDROID-17769851",
517+
"ANDROID-24441553",
518+
"ANDROID-24157524"
519+
],
520+
"description": "Remote Code Execution Vulnerabilities in Mediaserver",
521+
"impact": "During media file and data processing of a specially crafted file, vulnerabilities in mediaserver could allow an attacker to cause memory corruption and remote code execution as the mediaserver process. The affected functionality is provided as a core part of the operating system and there are multiple applications that allow it to be reached with remote content, most notably MMS and browser playback of media. This issue is rated as a Critical severity due to the possibility of remote code execution within the context of the mediaserver service. The mediaserver service has access to audio and video streams as well as access to privileges that third-party apps cannot normally access.",
522+
"external_links": [
523+
"https://source.android.com/security/bulletin/2015-12-01.html"
524+
],
525+
"cvssv2": 10,
526+
"patch": [
527+
"https://android.googlesource.com/platform%2Fframeworks%2Fav/+/77c185d5499d6174e7a97b3e1512994d3a803151",
528+
"https://android.googlesource.com/platform%2Fframeworks%2Fav/+/0d35dd2068d6422c3c77fb68f248cbabf3d0b10c",
529+
"https://android.googlesource.com/platform%2Fframeworks%2Fav/+/dedaca6f04ac9f95fabe3b64d44cd1a2050f079e",
530+
"https://android.googlesource.com/platform%2Fframeworks%2Fav/+/5d101298d8b0a78a1dc5bd26dbdada411f4ecd4d",
531+
"https://android.googlesource.com/platform%2Fexternal%2Flibavc/+/2ee0c1bced131ffb06d1b430b08a202cd3a52005"
532+
],
533+
"cvedate": "10/12/2015"
510534
}
511535
}

app/src/main/java/fuzion24/device/vulnerability/vulnerabilities/framework/media/CVE_2015_6616.java

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -29,9 +29,9 @@ CVE Bug(s) with AOSP links Severity Affected versions Date reported
2929
3030
ANDROID-24630158 https://android.googlesource.com/platform%2Fframeworks%2Fav/+/77c185d5499d6174e7a97b3e1512994d3a803151
3131
ANDROID-23882800 https://android.googlesource.com/platform%2Fframeworks%2Fav/+/0d35dd2068d6422c3c77fb68f248cbabf3d0b10c
32-
ANDROID-17769851 https://android.googlesource.com/platform%2Fframeworks%2Fav/+/dedaca6f04ac9f95fabe3b64d44cd1a2050f079e
33-
ANDROID-24441553 https://android.googlesource.com/platform%2Fframeworks%2Fav/+/5d101298d8b0a78a1dc5bd26dbdada411f4ecd4d
34-
ANDROID-24157524 https://android.googlesource.com/platform%2Fexternal%2Flibavc/+/2ee0c1bced131ffb06d1b430b08a202cd3a52005
32+
ANDROID-17769851 https://android.googlesource.com/platform%2Fframeworks%2Fav/+/dedaca6f04ac9f95fabe3b64d44cd1a2050f079e
33+
ANDROID-24441553 https://android.googlesource.com/platform%2Fframeworks%2Fav/+/5d101298d8b0a78a1dc5bd26dbdada411f4ecd4d
34+
ANDROID-24157524 https://android.googlesource.com/platform%2Fexternal%2Flibavc/+/2ee0c1bced131ffb06d1b430b08a202cd3a52005
3535
*/
3636

3737
@Override

0 commit comments

Comments
 (0)