CVE-2015-6614: Google Android

Medium severity, CVSS 5.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Telephony in Android 5.x before 5.1.1 LMY48X allows attackers to gain privileges, and consequently bypass intended network-interface restrictions, perform expensive data transfers, or cause a denial of service (call-reception outage or mute manipulation), via a crafted application, aka internal bug 21900139.

Affected products

• Google Android: version 5.0 only; version 5.1 only

Published 2015-11-03. Last modified 2026-06-17.