CVE-2015-7889: Google Android

Medium severity, CVSS 5.5. EPSS: 2.3% chance of exploitation in the next 30 days.

The SecEmailComposer/EmailComposer application in the Samsung S6 Edge before the October 2015 MR uses weak permissions for the com.samsung.android.email.intent.action.QUICK_REPLY_BACKGROUND service action, which might allow remote attackers with knowledge of the local email address to obtain sensitive information via a crafted application that sends a crafted intent.

Affected products

• Google Android: up to and including 5.1.1

Published 2017-12-28. Last modified 2026-06-17.