# CVEs published 2016-01-06

13 CVEs were published on January 6, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2015-5310](https://cve.now/CVE-2015-5310.md): The WNM Sleep Mode code in wpa\_supplicant 2.x before 2.6 does not properly ignore key data in response frames when management frame protecti (no CVSS)
- [CVE-2015-6636](https://cve.now/CVE-2015-6636.md): mediaserver in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows remote attackers to execute arbitrary code or cause a denial (no CVSS)
- [CVE-2015-6637](https://cve.now/CVE-2015-6637.md): The MediaTek misc-sd driver in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a crafted appli (no CVSS)
- [CVE-2015-6638](https://cve.now/CVE-2015-6638.md): The Imagination Technologies driver in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via a c (no CVSS)
- [CVE-2015-6640](https://cve.now/CVE-2015-6640.md): The prctl\_set\_vma\_anon\_name function in kernel/sys.c in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 does not ensure that only one (no CVSS)
- [CVE-2015-6641](https://cve.now/CVE-2015-6641.md): Bluetooth in Android 6.0 before 2016-01-01 allows remote attackers to obtain sensitive Contacts information by leveraging pairing, aka inter (no CVSS)
- [CVE-2015-6642](https://cve.now/CVE-2015-6642.md): The kernel in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain sensitive information, and consequently bypas (no CVSS)
- [CVE-2015-6643](https://cve.now/CVE-2015-6643.md): Setup Wizard in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows physically proximate attackers to modify settings or bypass (no CVSS)
- [CVE-2015-6644](https://cve.now/CVE-2015-6644.md): Bouncy Castle in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to obtain sensitive information via a crafted applic (no CVSS)
- [CVE-2015-6645](https://cve.now/CVE-2015-6645.md): SyncManager in Android before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to cause a denial of service (continuous rebooting) vi (no CVSS)
- [CVE-2015-6646](https://cve.now/CVE-2015-6646.md): The System V IPC implementation in the kernel in Android before 6.0 2016-01-01 allows attackers to cause a denial of service (global kernel (no CVSS)
- [CVE-2015-6639](https://cve.now/CVE-2015-6639.md): The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via (no CVSS)
- [CVE-2015-6647](https://cve.now/CVE-2015-6647.md): The Widevine QSEE TrustZone application in Android 5.x before 5.1.1 LMY49F and 6.0 before 2016-01-01 allows attackers to gain privileges via (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-01-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.