Permissions, Privileges, and Access Controls in Google Android - CVE-2015-6639
Published: January 6, 2016 / Updated: October 28, 2020
Vulnerability identifier: #VU40548
CSH Severity: High
CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2015-6639
CWE-ID: CWE-264
Exploitation vector: Remote access
Exploit availability:
Public exploit is available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.
The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application that leverages QSEECOM access, aka internal bug 24446875.
Affected software
Google Android
How to mitigate CVE-2015-6639
Install update from vendor's website.
Links to Public Exploits and PoC-codes
- Exploit #4757 - ExtractKeyMaster (Exploit that extracts Qualcomm's KeyMaster keys using CVE-2015-6639 and CVE-2016-2431) (October 28, 2020)
- Exploit #4534 - cve-2015-6639 (QSEE Privilege Escalation Exploit using PRDiag* commands (CVE-2015-6639)) (September 1, 2020)
- Exploit #3871 - QSEE - PRDiag* Commands Privilege Escalation (August 9, 2020)