libmpeg2 in libstagefright in Android 6.x before 2016-03-01 allows attackers to obtain sensitive information and consequently bypass an unspecified protection mechanism via crafted Bitstream data as demonstrated by obtaining Signature or SignatureOrSystem access aka internal bug 25765591.