CVE-2015-6639

High

Published: 06/01/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The Widevine QSEE TrustZone application in Android 5.x before version 5.1.1 LMY49F and 6.0 before January 1, 2016, allows attackers to gain privileges via a crafted application that leverages QSEECOM access.

Risk Assessment

Attackers may gain unauthorized privileges, potentially leading to serious security breaches of the system and user data.

Recommendation

It is recommended to update the Android system to the latest version to mitigate this vulnerability.

Other vulnerabilities in Widevine QSEE TrustZone application

CVE-2015-6647High
The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before January 1, 2016, allows attackers to gain privileges via a crafted application that leverages QSEECOM access.

Original NVD description (English source)

The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application that leverages QSEECOM access, aka internal bug 24446875.