CVE-2015-6642

Critical

Published: 06/01/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The kernel in Android before version 5.1.1 LMY49F and before January 1, 2016, allows attackers to obtain sensitive information, enabling them to bypass an unspecified protection mechanism. This is demonstrated by obtaining Signature or SignatureOrSystem access.

Risk Assessment

Organizations may be exposed to sensitive data leaks, potentially leading to serious security breaches and loss of user trust.

Recommendation

It is recommended to update the Android system to the latest version to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

The kernel in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 24157888.