CVE-2015-6624

System Server in Android 6.0 before 2015-12-01 allows attackers to obtain sensitive information via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 23999740...

CVE-2015-6628

Media Framework in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 2407448...

CVE-2015-6622

The Native Frameworks Library in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors, as demonstrated by obtaining Signature or SignatureOrSystem access, aka intern...

PT-2015-3172

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48Z Android versions prior to 6.0 before 2015-12-01 Description The issue is related to a lack of protection for service data in the libstagefright library of the Android operating system. It allows a remote...

PT-2015-3164

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48Z Android versions prior to 6.0 2015-12-01 Description The issue allows attackers to obtain sensitive information and bypass an unspecified protection mechanism via unknown vectors. This can be demonstrated...

CVE-2015-6621: Undefined Security Weakness

SystemUI in Android 5.x before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 23909438...

PT-2015-2940

Name of the Vulnerable Software and Affected Versions Android versions prior to 2015-12-01 Description The issue is related to insufficient access control in the Wi-Fi component of the Android operating system. It allows attackers to gain privileges via a crafted application, potentially obtainin...

PT-2015-2942

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48Z Android versions prior to 6.0 2015-12-01 Description The issue is related to insufficient access control in the Android operating system. It allows attackers to gain privileges via a crafted application,...

PT-2015-3173

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48Z Android versions prior to 6.0 before 2015-12-01 Description The issue is related to the libstagefright library in the Android operating system, which lacks protection for service data. This can be exploit...

PT-2015-3170

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48Z Description The issue is related to a lack of protection for service data in the Android operating system. This allows a remote attacker to obtain sensitive information. The exploitation can be achieved...

CVE-2015-6626: Exposure of Sensitive Information to an Unauthorized Actor

libstagefright in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug...

CVE-2015-6627: Exposure of Sensitive Information to an Unauthorized Actor

The Audio component in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to obtain sensitive information via a crafted audio file, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 24211743...

CVE-2015-6620: Undefined Security Weakness

libstagefright in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bugs 24123723 and 24445127...

CVE-2015-6624: Exposure of Sensitive Information to an Unauthorized Actor

System Server in Android 6.0 before 2015-12-01 allows attackers to obtain sensitive information via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 23999740...

CVE-2015-6622: Exposure of Sensitive Information to an Unauthorized Actor

The Native Frameworks Library in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors, as demonstrated by obtaining Signature or SignatureOrSystem access, aka intern...

CVE-2015-6629: Exposure of Sensitive Information to an Unauthorized Actor

Wi-Fi in Android 5.x before 5.1.1 LMY48Z allows attackers to obtain sensitive information via unspecified vectors, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 22667667...

CVE-2015-6632: Exposure of Sensitive Information to an Unauthorized Actor

libstagefright in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug...

CVE-2015-6628: Exposure of Sensitive Information to an Unauthorized Actor

Media Framework in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 2407448...

CVE-2015-6631: Exposure of Sensitive Information to an Unauthorized Actor

libstagefright in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug...

CVE-2015-6613

CVE-2015-6613 affects Android devices running versions prior to 5.1.1 LMY48X and before 2015-11-01 on 6.0. The issue allows a local attacker via Bluetooth to send commands to a debugging port and gain privileges (Signature or SignatureOrSystem) through a crafted app. The vulnerability is tied to ...