CVE-2015-6643: Medium severity Google Android vulnerability
Published Jan 4, 2016
·Updated
Setup Wizard in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows physically proximate attackers to modify settings or bypass a reset protection mechanism via unspecified vectors, aka internal bug 25290269.
Affected Software
4 affected components
Google Android=5.1.1
Google Android=6.0
Google Android=6.0.1
Google Android
Event History
Jan 4, 2016
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityAffected Software
Jan 6, 2016
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Event
07:59 PM
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The attacker must be physically proximate to the device and have low-level privileges. No user interaction is required.
2
Which Android releases are affected?
Android 5.x releases before 5.1.1 build LMY49F are affected. Android 6.0 releases before 2016-01-01 are also affected.
3
What could exploitation allow?
An attacker could modify device settings or bypass a reset-protection mechanism through unspecified vectors in Setup Wizard.