CVE-2015-6620

Vulnerability

A privilege escalation vulnerability exists in libstagefright in Android versions prior to 5.1.1 LMY48Z and 6.0 before the 2015-12-01 security patch level. The bug, referenced as internal issues 24123723 and 24445127, allows a crafted application to gain elevated privileges. The exact code path is not publicly detailed, but the issue lies in the media processing library [1].

Exploitation

An attacker requires the ability to install and run a crafted application on the target device. No additional user interaction beyond installation is necessary. The application can then trigger the vulnerability to escalate its privileges within the Android permission model. No network position or special authentication is required [1].

Impact

Successful exploitation allows the attacker to gain Signature or SignatureOrSystem level access, which effectively grants the same privileges as the system or a signed application. This enables the attacker to perform actions normally reserved for the device's trusted platform components, potentially leading to full device compromise [1].

Mitigation

The issue was addressed in the Android Security Bulletin for December 2015. Devices running Android 5.1.1 with build LMY48Z or later, and Android 6.0 with Security Patch Level of December 1, 2015 or later, include the fix. Source code patches were released to the Android Open Source Project (AOSP). Users should apply the available OTA update or flash updated firmware images. No workaround is available without the patch [1].