CVE-2015-6638: Critical severity android vulnerability

Published Jan 4, 2016

Updated

The Imagination Technologies driver in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application, aka internal bug 24673908.

Affected Software

5 affected components

Google Android=5.0

Google Android=5.1.1

Google Android=6.0

Google Android=6.0.1

Google Android

Event History

Jan 4, 2016

CVE Published

via Android·12:00 AM

Jan 6, 2016

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-6638?

CVE-2015-6638 is considered a high severity vulnerability due to its potential to allow privilege escalation on affected Android devices.

How do I fix CVE-2015-6638?

To fix CVE-2015-6638, users should update their Android devices to versions 5.1.1 LMY49F or later, or 6.0 and above.

Which Android versions are affected by CVE-2015-6638?

CVE-2015-6638 affects Android versions 5.0, 5.1.1 before LMY49F, and 6.0 before January 1, 2016.

What type of attacks exploit CVE-2015-6638?

CVE-2015-6638 can be exploited by attackers using a crafted application to gain elevated privileges on the device.

Who discovered CVE-2015-6638?

CVE-2015-6638 was reported through an internal bug identified as 24673908 at Imagination Technologies.