Code injection
The Secure Element Evaluation Kit aka SEEK or SmartCard API plugin in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 22301786...