Information disclosure in Google Android
CVE-2015-6622
The Native Frameworks Library in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 23905002.
Vulnerability class: Information Disclosure
EPSS: 0.005 (38.4th percentile) — read the EPSS interpretation.
Affected products
- Google Android — versions 6.0
- N/a — versions n/a
Weakness classification (CWE)
References
- security@android.com (x_refsource_CONFIRM, Vendor Advisory)