Information disclosure in Google Android
CVE-2015-6631
libstagefright in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 24623447.
Vulnerability class: Information Disclosure
EPSS: 0.008 (51.2th percentile) — read the EPSS interpretation.
Affected products
- Google Android — versions 6.0
- N/a — versions n/a
Weakness classification (CWE)
References
- security@android.com (x_refsource_CONFIRM, Vendor Advisory)