CVE-2015-8074: Google Android

Medium severity, CVSS 5.0. EPSS: 0.9% chance of exploitation in the next 30 days.

mediaserver in Android before 5.1.1 LMY48X allows remote attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors, aka internal bugs 23540907 and 23515142, a different vulnerability than CVE-2015-6611.

Affected products

• Google Android: up to and including 5.1

Published 2015-11-03. Last modified 2026-06-17.