CVE-2015-6642

9.8 criticalEPSS 0.7%

Critical (9.8) in google android. EPSS 0.7% chance of exploitation in the next 30 days.

The kernel in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 24157888.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2016-01-06
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

google:android

References

http://source.android.com/security/bulletin/2016-01-01.html
http://www.securitytracker.com/id/1034592
http://source.android.com/security/bulletin/2016-01-01.html
http://www.securitytracker.com/id/1034592

Check your stack JSON