CVE-2015-6783

The FindStartOffsetOfFileInZipFile function in crazy_linker_zip.cpp in crazy_linker (aka Crazy...

4.3 MediumFix available

The FindStartOffsetOfFileInZipFile function in crazy_linker_zip.cpp in crazy_linker (aka Crazy Linker) in Android 5.x and 6.x, as used in Google Chrome before 47.0.2526.73, improperly searches for an EOCD record, which allows attackers to bypass a signature-validation requirement via a crafted ZIP archive.

Exploit likelihood

1.23%Up 0.1 points since Feb 4, 2022

What each source reports

NVD Score used 4.3

Record: CVE-2015-6783
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness: CWE-20
Updated: 2026-11-02

CVE List No score

Record: CVE-2015-6783
Updated: 2026-11-02

EUVDEUVD-2015-6720 No score

Record: EUVD-2015-6720
Updated: 2026-11-03

GitHub AdvisoriesGHSA-vpr7-fccx-29hw No score

The FindStartOffsetOfFileInZipFile function in crazy_linker_zip.cpp in crazy_linker (aka Crazy...

Record: GHSA-vpr7-fccx-29hw
Weakness: CWE-20
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10171-1 No score

chromedriver-55.0.2883.75-3.1 on GA media

These are all security issues fixed in the chromedriver-55.0.2883.75-3.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10171-1
Updated: 2026-11-02

OSVopenSUSE-SU-2024:12948-1 No score

ungoogled-chromium-113.0.5672.92-1.1 on GA media

These are all security issues fixed in the ungoogled-chromium-113.0.5672.92-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:12948-1
Updated: 2026-11-02

OSVUBUNTU-CVE-2015-6783 No score

Record: UBUNTU-CVE-2015-6783
Updated: 2026-11-02

Affected products

google android

Affected packages

Affected packages
Package	Affected	Fixed
`chromium-browser` Ubuntu:14.04:LTS	before 47.0.2526.73-0ubuntu0.14.04.1.1106, plus listed versions 29.0.1547.65-0ubuntu231.0.1650.63-0ubuntu1~20131204.132.0.1700.107-0ubuntu1~20140204.977.133.0.1750.152-0ubuntu1~pkg995.134.0.1847.116-0ubuntu2 Show 13 moreShow less 36.0.1985.125-0ubuntu1.14.04.0~pkg102937.0.2062.94-0ubuntu0.14.04.1~pkg104237.0.2062.120-0ubuntu0.14.04.1~pkg104938.0.2125.111-0ubuntu0.14.04.1.106139.0.2171.65-0ubuntu0.14.04.1.106440.0.2214.94-0ubuntu0.14.04.1.106840.0.2214.111-0ubuntu0.14.04.1.106941.0.2272.76-0ubuntu0.14.04.1.107643.0.2357.81-0ubuntu0.14.04.1.108943.0.2357.130-0ubuntu0.14.04.1.109244.0.2403.89-0ubuntu0.14.04.1.109545.0.2454.85-0ubuntu0.14.04.1.109745.0.2454.101-0ubuntu0.14.04.1.1099	47.0.2526.73-0ubuntu0.14.04.1.1106
`chromium` openSUSE:Tumbleweed	before 55.0.2883.75-3.1	55.0.2883.75-3.1
`chromium` openSUSE:Tumbleweed	before 113.0.5672.92-1.1	113.0.5672.92-1.1

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-6783 is a medium vulnerability (CVSS 4.3) in Google Android, published December 6, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.23%, the 69th percentile. Fixed in chromium-browser 47.0.2526.73-0ubuntu0.14.04.1.1106.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 2,144 references. The JSON record has them.