CVE-2015-6627

CVE-2015-6627 describes an information disclosure vulnerability in the Audio component of Android versions before 5.1.1 LMY48Z and 6.0 before the 2015-12-01 patch. A remote attacker could exploit this by providing a specially crafted audio file, potentially gaining elevated privileges such as Signature or SignatureOrSystem access. The vulnerability has a low CVSS score of 2.6, indicating a network-based attack with high attack complexity and a partial impact on confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog, though it received some community discussion and media coverage at the time.