# CVEs published 2015-11-03

10 CVEs were published on November 3, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-6608](https://cve.now/CVE-2015-6608.md): mediaserver in Android 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial (no CVSS)
- [CVE-2015-6609](https://cve.now/CVE-2015-6609.md): libutils in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of ser (no CVSS)
- [CVE-2015-6610](https://cve.now/CVE-2015-6610.md): libstagefright in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to gain privileges or cause a denial of service (me (no CVSS)
- [CVE-2015-6611](https://cve.now/CVE-2015-6611.md): mediaserver in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to obtain sensitive information, and consequent (no CVSS)
- [CVE-2015-6612](https://cve.now/CVE-2015-6612.md): libmedia in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to gain privileges via a crafted application, aka interna (no CVSS)
- [CVE-2015-6613](https://cve.now/CVE-2015-6613.md): Bluetooth in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to send commands to a debugging port, and consequently g (no CVSS)
- [CVE-2015-6614](https://cve.now/CVE-2015-6614.md): Telephony in Android 5.x before 5.1.1 LMY48X allows attackers to gain privileges, and consequently bypass intended network-interface restric (no CVSS)
- [CVE-2015-8072](https://cve.now/CVE-2015-8072.md): mediaserver in Android 4.4 through 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or ca (no CVSS)
- [CVE-2015-8073](https://cve.now/CVE-2015-8073.md): mediaserver in Android 4.4 and 5.1 before 5.1.1 LMY48X allows remote attackers to execute arbitrary code or cause a denial of service (memor (no CVSS)
- [CVE-2015-8074](https://cve.now/CVE-2015-8074.md): mediaserver in Android before 5.1.1 LMY48X allows remote attackers to obtain sensitive information, and consequently bypass an unspecified p (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-11-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.