Information disclosure in Google Android
CVE-2015-6626
libstagefright in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 24310423.
Vulnerability class: Information Disclosure
EPSS: 0.006 (46.8th percentile) — read the EPSS interpretation.
Affected products
- Google Android — versions 6.0
- N/a — versions n/a
Weakness classification (CWE)
References
- security@android.com (x_refsource_CONFIRM, Vendor Advisory)