CVE-2015-6639: Critical severity android vulnerability
The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application that leverages QSEECOM access, aka internal bug 24446875.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-6639?
CVE-2015-6639 is considered a critical vulnerability due to the potential for privilege escalation.
How do I fix CVE-2015-6639?
To fix CVE-2015-6639, update affected Android devices to patched versions beyond 5.1.1 LMY49F and 6.0 released on or after January 1, 2016.
What platforms are affected by CVE-2015-6639?
CVE-2015-6639 affects Google Android versions 5.0, 5.1.1, 6.0, and 6.0.1.
What type of attack does CVE-2015-6639 involve?
CVE-2015-6639 involves an attack that leverages a crafted application to gain unauthorized privileges through QSEECOM access.
Is CVE-2015-6639 still a risk for users?
CVE-2015-6639 poses a risk for users who have not updated their devices to the latest security patches.