CVE-2015-7946

4.6 mediumEPSS 0.4%

Information Exposure vulnerability in Unity8 as used on the Ubuntu phone and possibly also in Unity8 shipped elsewhere. This allows an attacker to enable the MTP service by opening the emergency dialer. Fixed in 8.11+16.04.20160111.1-0ubuntu1 and 8.11+15.04.20160122-0ubuntu1.

Severity

CVSS 3.1

4.6 medium

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 30% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2020-05-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ubports:unity8

References

https://launchpad.net/bugs/1525981
https://launchpad.net/bugs/1525981

Check your stack JSON