CVE-2015-8507

CVE-2015-8507 is a critical memory corruption vulnerability in the mediaserver component of Android 6.0, affecting devices before the December 2015 security update. An unauthenticated remote attacker could exploit this flaw by enticing a user to open a specially crafted media file, leading to arbitrary code execution or a denial of service. With a CVSS score of 9.3, this vulnerability is highly severe due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, public exploit code, or significant community discussion, the potential impact remains high for unpatched systems.