PT-2015-3167 · Google · Android

Flanker_Hqd + 4 · Published 2015-12-08 · Updated 2019-02-12 · CVE-2015-6626

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48Z Android versions prior to 6.0 before 2015-12-01

Description The issue is related to the libstagefright library in the Android operating system and is caused by a lack of protection for service data. It allows a remote attacker to obtain sensitive information and bypass an unspecified protection mechanism. The attacker can gain Signature or SignatureOrSystem access via unknown vectors.

Recommendations For Android versions prior to 5.1.1 LMY48Z, update to version 5.1.1 LMY48Z or later. For Android versions prior to 6.0 before 2015-12-01, update to version 6.0 from 2015-12-01 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2016-00518

CVE-2015-6626

Affected Products

Android

References · 3

• http://source.android.com/security/bulletin/2015-12-01.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-6626 · Security Note
• https://bdu.fstec.ru/vul/2016-00518 · Security Note