1. Home
  2. CVE Database
  3. CVE-2015-6606
HIGH · 9.3

CVE-2015-6606

The Secure Element Evaluation Kit (aka SEEK or SmartCard API) plugin in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signatur...

Vulnerability Description

The Secure Element Evaluation Kit (aka SEEK or SmartCard API) plugin in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 22301786.

CVSS Score

9.3

HIGH

AV:N/AC:M/Au:N/C:C/I:C/A:C
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE

Affected Products

VendorProductVersions
GoogleAndroid<= 5.1

Related Weaknesses (CWE)

CWE-264

References

FAQ

What is CVE-2015-6606?

CVE-2015-6606 is a vulnerability with a CVSS score of 9.3 (HIGH). The Secure Element Evaluation Kit (aka SEEK or SmartCard API) plugin in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signatur...

How severe is CVE-2015-6606?

CVE-2015-6606 has been rated HIGH with a CVSS base score of 9.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2015-6606?

Check the references section above for vendor advisories and patch information. Affected products include: Google Android.