Google · Android · CVE-2015-6639
**Name of the Vulnerable Software and Affected Versions**
Android versions 5.x through 5.1.1 before LMY49F
Android versions 6.0 before 2016-01-01
**Description**
The issue is related to insufficient access control in the Widevine QSEE TrustZone application. It allows attackers to gain privileges via a crafted application that leverages QSEECOM access.
**Recommendations**
For Android versions 5.x through 5.1.1 before LMY49F, update to version 5.1.1 LMY49F or later.
For Android versions 6.0 before 2016-01-01, update to a version released after 2016-01-01.