CVE-2015-6614

Telephony in Android 5.x before 5.1.1 LMY48X allows attackers to gain privileges, and consequently bypass intended network-interface restrictions, perform expensive data transfers, or cause a denial of service (call-reception outage or mute manipulation), via a crafted application, aka internal bug 21900139.

Score
CVSS 2.0 5.8 Medium
Status
Modified - security@android.com
Published
2015-11-03
Last modified
2024-08-06
Weaknesses
CWE-264

Affected products

References