CVE-2015-6640 is a privilege escalation and denial-of-service vulnerability affecting Android versions before 5.1.1 LMY49F and 6.0 before 2016-01-01. A flaw in the prctl_set_vma_anon_name function allows a crafted application to corrupt the Virtual Memory Area (VMA) list. This vulnerability has a high CVSS score of 7.8, indicating that a local attacker, with user interaction, could achieve high confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, nor are there public exploit modules or proof-of-concept code available. While there's limited community discussion and media coverage, Google has released patches addressing this issue.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
4.4.4CPE matchmatch criteria | cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:* | ||
5.0CPE matchmatch criteria | cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:* | ||
5.1.1CPE matchmatch criteria | cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:* | ||
6.0CPE matchmatch criteria | cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.