Vulnerability in Google Android
CVE-2015-6614
Telephony in Android 5.x before 5.1.1 LMY48X allows attackers to gain privileges, and consequently bypass intended network-interface restrictions, perform expensive data transfers, or cause a denial of service (call-reception outage or mute manipulation), via a crafted application, aka internal bug 21900139.
EPSS: 0.006 (43.5th percentile) — read the EPSS interpretation.
Affected products
- Google Android — versions 5.0, 5.1
- N/a — versions n/a
Weakness classification (CWE)
References
- security@android.com (Vendor Advisory, mailing-list, x_refsource_MLIST)
- security@android.com (vdb-entry, x_refsource_SECTRACK)