CVE-2015-7896
Severity CVSS v4.0:
Pending analysis
Type:
CWE-119
Buffer Errors
Publication date:
24/08/2017
Last modified:
20/04/2025
Description
LibQJpeg in the Samsung Galaxy S6 before the October 2015 MR allows remote attackers to cause a denial of service (memory corruption and SIGSEGV) via a crafted image file.
Impact
Base Score 3.x
6.50
Severity 3.x
MEDIUM
Base Score 2.0
4.30
Severity 2.0
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:samsung:samsung_mobile:5.0:*:*:*:*:*:*:* | ||
| cpe:2.3:o:samsung:samsung_mobile:5.0.1:*:*:*:*:*:*:* | ||
| cpe:2.3:o:samsung:samsung_mobile:5.0.2:*:*:*:*:*:*:* | ||
| cpe:2.3:o:samsung:samsung_mobile:5.1:*:*:*:*:*:*:* | ||
| cpe:2.3:o:samsung:samsung_mobile:5.1.1:*:*:*:*:*:*:* | ||
| cpe:2.3:o:samsung:samsung_mobile:6.0:*:*:*:*:*:*:* | ||
| cpe:2.3:o:samsung:samsung_mobile:6.0.1:*:*:*:*:*:*:* | ||
| cpe:2.3:o:samsung:samsung_mobile:7.0:*:*:*:*:*:*:* | ||
| cpe:2.3:o:samsung:samsung_mobile:7.1:*:*:*:*:*:*:* | ||
| cpe:2.3:o:samsung:samsung_mobile:7.1.1:*:*:*:*:*:*:* | ||
| cpe:2.3:o:samsung:samsung_mobile:7.1.2:*:*:*:*:*:*:* | ||
| cpe:2.3:h:samsung:galaxy_s6:-:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://packetstormsecurity.com/files/134198/Samsung-Galaxy-S6-LibQjpeg-DoIntegralUpsample-Crash.html
- http://www.securityfocus.com/bid/77425
- https://bugs.chromium.org/p/project-zero/issues/detail?id=498&redir=1
- https://www.exploit-db.com/exploits/38612/
- http://packetstormsecurity.com/files/134198/Samsung-Galaxy-S6-LibQjpeg-DoIntegralUpsample-Crash.html
- http://www.securityfocus.com/bid/77425
- https://bugs.chromium.org/p/project-zero/issues/detail?id=498&redir=1
- https://www.exploit-db.com/exploits/38612/



