CVE-2015-6644

LOW

Android < 5.1.1 LMY49F and 6.0 < 2016-01-01 - Exposure of Sensitive Information via Bouncy Castle

Title source: llm
STIX 2.1

Description

Bouncy Castle in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain sensitive information via a crafted application, aka internal bug 24106146.

References (11)

Core 11
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2017:2809
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2017:1832
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2017:2810
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1034592
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2017:2808
Vendor Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/3727-1/
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2018:2927
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2017/dsa-3829
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2017:2811
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/79865

Scores

CVSS v3 3.3
EPSS 0.0093
EPSS Percentile 56.2%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Details

CWE
CWE-200
Status published
Products (8)
google/android 4.4.4
google/android 5.0
google/android 5.0.1
google/android 5.0.2
google/android 5.1.0
google/android 5.1.1
google/android 6.0
google/android 6.0.1
Published Jan 06, 2016
Tracked Since Feb 18, 2026