CVE-2015-6639
HIGHAndroid Widevine QSEE TrustZone < 5.1.1 LMY49F and < 2016-01-01 - Privilege Escalation via QSEECOM Access
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2015-6639. PoCs published by laginimaineb.
AI-analyzed exploit summary This exploit targets a privilege escalation vulnerability in Qualcomm's Secure Execution Environment (QSEE) by leveraging PRDiag commands. It allows local attackers to escalate privileges on affected devices.
Description
The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted application that leverages QSEECOM access, aka internal bug 24446875.
Exploits (3)
This exploit targets a privilege escalation vulnerability in Qualcomm's Secure Execution Environment (QSEE) by leveraging PRDiag commands. It allows local attackers to escalate privileges on affected devices.
This repository contains a functional exploit for CVE-2016-2431, targeting Qualcomm's KeyMaster to extract cryptographic keys. The exploit leverages memory corruption in the QSEECom API to bypass security measures and dump keys from the Widevine trusted application.
This repository contains a functional exploit for CVE-2015-6639, a QSEE privilege escalation vulnerability. The code demonstrates memory corruption via PRDiag commands to achieve local privilege escalation on affected Qualcomm devices.
References (5)
Scores
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H