CVE-2015-6620

CVE-2015-6620 is a privilege escalation vulnerability affecting libstagefright in Android versions prior to 5.1.1 LMY48Z and 6.0 before the 2015-12-01 security update. An attacker can exploit this flaw via a crafted application to gain elevated privileges, such as Signature or SignatureOrSystem access. With a CVSS score of 9.3 (Critical) and a FAUCET Risk Score of 89/100, this vulnerability is highly severe, allowing complete compromise of confidentiality, integrity, and availability with medium attack complexity and no authentication required. Despite its high severity and critical rating, there is no public exploit code available in Metasploit, Nuclei, or ExploitDB, and it is not listed in the KEV catalog, though it has garnered some community discussion and media coverage.