CVE-2015-3879
Media Player Framework in Android before 5.1.1 LMY48T allows attackers to gain privileges via a...
Media Player Framework in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, aka internal bug 23223325.
Exploit likelihood
What each source reports
NVD Score used
Media Player Framework in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, aka internal bug 23223325.
- Record
CVE-2015-3879- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Media Player Framework in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, aka internal bug 23223325.
- Record
CVE-2015-3879- Updated
- 2026-11-02
EUVDEUVD-2015-3915 No score
Media Player Framework in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, aka internal bug 23223325.
- Record
EUVD-2015-3915- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6rcf-98qc-gqqf No score
Media Player Framework in Android before 5.1.1 LMY48T allows attackers to gain privileges via a...
Media Player Framework in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, aka internal bug 23223325.
- Record
GHSA-6rcf-98qc-gqqf- Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-3879 No score
Media Player Framework in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, aka internal bug 23223325.
- Record
UBUNTU-CVE-2015-3879- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
androidUbuntu:16.04:LTS |
All versions, plus listed versions 20150818-1500-0ubuntu220150818-1500-0ubuntu320160307-0742-0ubuntu320160330-0939-0ubuntu1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-3879 is a high vulnerability (CVSS 9.3) in Google Android, published October 6, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.62%, the 49th percentile. No source names a fixed version.
References
groups.google.com/forum/message/raw?msg=android-security-updates/_Rm-lKnS2M8/dGTcilt0CAAJ
nvd.nist.gov/vuln/detail/CVE-2015-3879
github.com/advisories/GHSA-6rcf-98qc-gqqf
ubuntu.com/security/CVE-2015-3879
android.googlesource.com/platform/frameworks/av/+/aa4da6fa7ca2454f0713de0a5a583b5b8160166b%5E!
cve.org/CVERecord?id=CVE-2015-3879