high7.5Public exploit code
CVE-2015-7897
The media scanning functionality in the face recognition library in android.media.process in Samsung Galaxy S6 Edge before G925VVRU4B0G9 allows remote attacker…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Samsung Galaxy S6 - android.media.process Face Recognition Memory Corruption2015-11-03 · dos · android · Verified
Impact
The media scanning functionality in the face recognition library in android.media.process in Samsung Galaxy S6 Edge before G925VVRU4B0G9 allows remote attackers to gain privileges or cause a denial of service (memory corruption) via a crafted BMP image file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Samsung | Galaxy S6 | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://googleprojectzero.blogspot.com/2015/11/hack-galaxy-hunting-bugs-in-samsung.html
- http://packetstormsecurity.com/files/134199/Samsung-Galaxy-S6-Android.media.process-Face-Recognition-Memory-Corruption.html
- https://code.google.com/p/google-security-research/issues/detail?id=499&q=samsung
- https://www.exploit-db.com/exploits/38611/
- http://googleprojectzero.blogspot.com/2015/11/hack-galaxy-hunting-bugs-in-samsung.html
- http://packetstormsecurity.com/files/134199/Samsung-Galaxy-S6-Android.media.process-Face-Recognition-Memory-Corruption.html
- https://code.google.com/p/google-security-research/issues/detail?id=499&q=samsung
- https://www.exploit-db.com/exploits/38611/