Candidate: CVE-2015-8073 PublicDate: 2015-11-03 11:59:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8073 https://groups.google.com/forum/message/raw?msg=android-security-updates/n1aw2MGce4E/jhpVEWDUCAAJ Description: mediaserver in Android 4.4 and 5.1 before 5.1.1 LMY48X allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 14388161, a different vulnerability than CVE-2015-6608 and CVE-2015-8072. Ubuntu-Description: Notes: jdstrand> as with previous stagefright issues, this issue affects Ubuntu's android packages, but not in a way that is exposed to apps. See CVE-2015-1538 for details Bugs: Priority: negligible Discovered-by: Assigned-to: CVSS: Tags_android: apparmor Patches_android: upstream_android: released (5.1.1 LMY48X) precise_android: DNE trusty_android: ignored trusty/esm_android: DNE (trusty was ignored) vivid_android: ignored vivid/stable-phone-overlay_android: ignored vivid/ubuntu-core_android: DNE wily_android: ignored devel_android: ignored