# CVEs published 2015-10-06 30 CVEs were published on October 6, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2015-3823](https://cve.now/CVE-2015-3823.md): libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS) - [CVE-2015-3847](https://cve.now/CVE-2015-3847.md): Bluetooth in Android before 5.1.1 LMY48T allows attackers to remove stored SMS messages via a crafted application, aka internal bug 22343270 (no CVSS) - [CVE-2015-3862](https://cve.now/CVE-2015-3862.md): mediaserver in Android before 5.1.1 LMY48T allows attackers to cause a denial of service (process crash) via unspecified vectors, aka intern (no CVSS) - [CVE-2015-3865](https://cve.now/CVE-2015-3865.md): The Runtime subsystem in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, as demonstrated by obtai (no CVSS) - [CVE-2015-3867](https://cve.now/CVE-2015-3867.md): libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS) - [CVE-2015-3868](https://cve.now/CVE-2015-3868.md): libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS) - [CVE-2015-3869](https://cve.now/CVE-2015-3869.md): libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS) - [CVE-2015-3870](https://cve.now/CVE-2015-3870.md): libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS) - [CVE-2015-3871](https://cve.now/CVE-2015-3871.md): libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS) - [CVE-2015-3872](https://cve.now/CVE-2015-3872.md): libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS) - [CVE-2015-3873](https://cve.now/CVE-2015-3873.md): libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS) - [CVE-2015-3874](https://cve.now/CVE-2015-3874.md): The Sonivox components in Android before 5.1.1 LMY48T allow remote attackers to execute arbitrary code or cause a denial of service (memory (no CVSS) - [CVE-2015-3875](https://cve.now/CVE-2015-3875.md): libutils in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v (no CVSS) - [CVE-2015-3877](https://cve.now/CVE-2015-3877.md): Skia, as used in Android before 5.1.1 LMY48T, allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS) - [CVE-2015-3878](https://cve.now/CVE-2015-3878.md): Media Projection in Android 5.x before 5.1.1 LMY48T and 6.0 before 2015-10-01 allows attackers to bypass an intended screen-recording warnin (no CVSS) - [CVE-2015-3879](https://cve.now/CVE-2015-3879.md): Media Player Framework in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, aka internal bug 232233 (no CVSS) - [CVE-2015-6596](https://cve.now/CVE-2015-6596.md): mediaserver in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, aka internal bugs 20731946 and 207 (no CVSS) - [CVE-2015-6598](https://cve.now/CVE-2015-6598.md): libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS) - [CVE-2015-6599](https://cve.now/CVE-2015-6599.md): libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS) - [CVE-2015-6600](https://cve.now/CVE-2015-6600.md): libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS) - [CVE-2015-6601](https://cve.now/CVE-2015-6601.md): libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS) - [CVE-2015-6603](https://cve.now/CVE-2015-6603.md): libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS) - [CVE-2015-6604](https://cve.now/CVE-2015-6604.md): libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt (no CVSS) - [CVE-2015-6605](https://cve.now/CVE-2015-6605.md): mediaserver in Android before 5.1.1 LMY48T allows attackers to cause a denial of service (process crash) via unspecified vectors, aka intern (no CVSS) - [CVE-2015-6606](https://cve.now/CVE-2015-6606.md): The Secure Element Evaluation Kit (aka SEEK or SmartCard API) plugin in Android before 5.1.1 LMY48T allows attackers to gain privileges via (no CVSS) - [CVE-2015-6607](https://cve.now/CVE-2015-6607.md): SQLite before 3.8.9, as used in Android before 5.1.1 LMY48T, allows attackers to gain privileges via a crafted application, aka internal bug (no CVSS) - [CVE-2015-7600](https://cve.now/CVE-2015-7600.md): Cisco VPN Client 5.x through 5.0.07.0440 uses weak permissions for vpnclient.ini, which allows local users to gain privileges by entering an (no CVSS) - [CVE-2015-7716](https://cve.now/CVE-2015-7716.md): libstagefright in Android 5.x before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory cor (no CVSS) - [CVE-2015-7717](https://cve.now/CVE-2015-7717.md): mediaserver in Android 5.x before 5.1.1 LMY48T and 6.0 before 2015-10-01 allows attackers to gain privileges via a crafted application, aka (no CVSS) - [CVE-2015-7718](https://cve.now/CVE-2015-7718.md): mediaserver in Android 5.x before 5.1.1 LMY48T and 6.0 before 2015-10-01 allows attackers to cause a denial of service (process crash) via u (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-10-06 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.