CVE-2015-6641: Infoleak
Published Jan 4, 2016
·Updated
Bluetooth in Android 6.0 before 2016-01-01 allows remote attackers to obtain sensitive Contacts information by leveraging pairing, aka internal bug 23607427.
Affected Software
2 affected components
Google Android=6.0
Google Android
Event History
Jan 4, 2016
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityAffected Software
Jan 6, 2016
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-6641?
CVE-2015-6641 has a medium severity rating as it allows unauthorized access to sensitive Contacts information via Bluetooth.
2
How do I fix CVE-2015-6641?
To fix CVE-2015-6641, update your Android device to version 6.0 or later that includes security patches released after January 1, 2016.
3
What types of devices are affected by CVE-2015-6641?
CVE-2015-6641 affects devices running Android 6.0 prior to the January 1, 2016 security update.
4
What information can be accessed due to CVE-2015-6641?
CVE-2015-6641 allows attackers to obtain sensitive Contacts information from the device.
5
Is CVE-2015-6641 being actively exploited?
There is no specific information indicating that CVE-2015-6641 is being actively exploited, but it poses a significant risk.