VULNERABILITY INTELLIGENCE
CVE-2015-6618
CVSS score4.3 MEDIUM
EPSS probability0.37%
CISA KEVNot currently listed
Published2015-12-08
Last modified2026-06-17
CVSS vectorAV:A/AC:H/Au:N/C:P/I:P/A:P
Description
Bluetooth in Android 4.4 and 5.x before 5.1.1 LMY48Z allows user-assisted remote attackers to execute arbitrary code by leveraging access to the local physical environment, aka internal bug 24595992.
Primary references
- security@android.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory