CVE-2016-0825: Google Android

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

The Widevine Trusted Application in Android 6.0.1 before 2016-03-01 allows attackers to obtain sensitive TrustZone secure-storage information by leveraging kernel access, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 20860039.

Affected products

• Google Android: version 6.0.1 only

Published 2016-03-12. Last modified 2026-06-17.