PT-2016-1011

CVE-2015-6637

Published

2016-01-06

Updated

2016-12-07

Description by

CVSS 2.0

9.3

High

MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY49F Android versions prior to 6.0 2016-01-01

Description The issue is related to the MediaTek misc-sd driver in Android, which has inadequate access control. This allows attackers to gain privileges via a crafted application.

Recommendations For Android versions prior to 5.1.1 LMY49F, update to version 5.1.1 LMY49F or later. For Android versions prior to 6.0 2016-01-01, update to version 6.0 2016-01-01 or later.

Exploitability

Exploit

Fix

Researchers

Jfang

Nforest

Vendors

Affected products

Weakness enumeration

CWE-264

Related identifiers

CVE-2015-6637