First published: Mon Jan 04 2016(Updated: )
The MediaTek misc-sd driver in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application, aka internal bug 25307013.
Credit: security@android.com
Affected Software | Affected Version | How to fix |
---|---|---|
Android | ||
Android | =4.4.4 | |
Android | =5.0 | |
Android | =5.1.1 | |
Android | =6.0 | |
Android | =6.0.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-6637 has been classified as a high severity vulnerability due to its potential to allow privilege escalation.
To fix CVE-2015-6637, you should update your Android device to at least version 6.0.1 or apply the corresponding security patches provided by the device manufacturer.
CVE-2015-6637 affects Android versions 4.4.4, 5.0, 5.1.1, and all versions prior to 6.0.1.
CVE-2015-6637 facilitates a privilege escalation attack that can be executed via a crafted application.
While CVE-2015-6637 is significant due to the privilege escalation capability, its criticality depends on the exposure of affected devices and their configurations.