Android Trustzone Privilege Escalation Vulnerability (CVE-2015-6639)

Android Trustzone Privilege Escalation Vulnerability (CVE-2015-6639)
Android Trustzone Privilege Escalation Vulnerability (CVE-2015-6639)

Release date:
Updated on:

Affected Systems:

Android <5.1.1 LMY49F
Android 6.0 (<)

Description:

CVE (CAN) ID: CVE-2015-6639

Android is a mobile phone operating system based on the Linux open kernel.

In Android 5.1.1 and LMY49F versions 5.x and earlier than 6.0, the Trustzone application has a security vulnerability. Remote attackers can exploit the constructed applications to obtain elevation permissions.

<* Source: Gal Beniamini
*>

Suggestion:

Vendor patch:

Android
-------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://source.android.com/security/bulletin/2016-01-01.html