CVE-2015-1474: Integer Overflow
Multiple integer overflows in the GraphicBuffer::unflatten function in platform/frameworks/native/libs/ui/GraphicBuffer.cpp in Android through 5.0 allow attackers to gain privileges or cause a denial of service (memory corruption) via vectors that trigger a large number of (1) file descriptors or (2) integer values.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1474?
CVE-2015-1474 has a high severity level due to the potential for privilege escalation and denial of service.
How do I fix CVE-2015-1474?
To fix CVE-2015-1474, update your Android device to a version higher than 5.0, as versions after this do not contain the vulnerability.
What systems are affected by CVE-2015-1474?
CVE-2015-1474 affects Google Android versions up to and including 5.0.
What type of exploitation is possible with CVE-2015-1474?
CVE-2015-1474 can be exploited to gain privileges or cause memory corruption, leading to denial of service.
Is CVE-2015-1474 a remote vulnerability?
CVE-2015-1474 is not specifically described as a remote vulnerability; it involves local exploitation through the GraphicBuffer manipulation.