CVE-2015-6621: Critical severity Google Android vulnerability

Published Dec 7, 2015

Updated

SystemUI in Android 5.x before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 23909438.

Affected Software

4 affected components

Google Android=5.0

Google Android=5.1

Google Android=6.0

Google Android

Event History

Dec 7, 2015

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityAffected Software

Dec 8, 2015

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

Which devices are affected?

Google Android 5.x releases before 5.1.1 LMY48Z and Android 6.0 releases before the 2015-12-01 security update are affected.

What does an attacker need to exploit this issue?

An attacker needs a crafted application. The published vector lists no authentication requirement.

What level of access could exploitation provide?

Successful exploitation can allow an attacker to gain privileges, including Signature or SignatureOrSystem access, with impacts to confidentiality, integrity, and availability.

CVE-2015-6621: Critical severity Google Android vulnerability

Affected Software

Event History

Frequently Asked Questions

Which devices are affected?

What does an attacker need to exploit this issue?

What level of access could exploitation provide?

Company

Resources

Contact

Frequently Asked Questions

Which devices are affected?

What does an attacker need to exploit this issue?

What level of access could exploitation provide?