CVE-2015-6642: Critical severity android vulnerability

Published Jan 4, 2016

Updated

The kernel in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 24157888.

Affected Software

4 affected components

Google Android=5.1.0

Google Android=6.0

Google Android=6.0.1

Google Android

Event History

Jan 4, 2016

CVE Published

via Android·12:00 AM

Jan 6, 2016

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-6642?

CVE-2015-6642 is considered a high severity vulnerability allowing potential data exposure.

Which versions of Android are affected by CVE-2015-6642?

CVE-2015-6642 affects Android versions prior to 5.1.1 LMY49F and 6.0 before 2016-01-01.

How do I fix CVE-2015-6642?

To mitigate CVE-2015-6642, update your Android device to the latest version beyond 6.0 or 5.1.1 LMY49F.

What type of vulnerability is CVE-2015-6642?

CVE-2015-6642 is a potential information disclosure vulnerability in the Android kernel.

What can attackers achieve through CVE-2015-6642?

Attackers can exploit CVE-2015-6642 to obtain sensitive information and bypass certain protection mechanisms.