CVE-2015-6619: Critical severity Google Android vulnerability
Published Dec 7, 2015
·Updated
The kernel in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to gain privileges via a crafted application, aka internal bug 23520714.
Affected Software
3 affected components
Google Android>=5.0<5.1.1
Google Android=6.0
Google Android
Event History
Dec 7, 2015
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityAffected Software
Dec 8, 2015
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
Which Android versions are affected?
The issue affects Android versions before 5.1.1 build LMY48Z and Android 6.0 releases before 2015-12-01.
2
What does an attacker need to exploit this issue?
An attacker needs to get a crafted application onto the device. The vulnerability can then be used to gain privileges.
3
Are devices exposed remotely by default?
The provided attack vector is network-based, but the description specifically identifies a crafted application as the exploitation method. It does not state whether any default service or configuration is required.