CVE-2015-6642

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-01-06 · updated 2026-06-17
Weakness: CWE-264

Description

The kernel in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 24157888.

Affected products

Android: 5.1.0, 6.0, 6.0.1

References

http://source.android.com/security/bulletin/2016-01-01.html
http://www.securitytracker.com/id/1034592
http://source.android.com/security/bulletin/2016-01-01.html
http://www.securitytracker.com/id/1034592

Get alerted when CVE-2015-6642 or the next vulnerability affects your stack