CVE-2015-1528: Integer Overflow
Integer overflow in the nativehandlecreate function in libcutils/nativehandle.c in Android before 5.1.1 LMY48M allows attackers to obtain a different application's privileges or cause a denial of service (Binder heap memory corruption) via a crafted application, aka internal bug 19334482.
Affected Software
Event History
Frequently Asked Questions
Which Android versions are affected?
Android versions before 5.1.1 build LMY48M are affected. The supplied data does not identify affected device models or vendor-specific firmware builds.
What does an attacker need to exploit this issue?
An attacker needs to supply a crafted application. The vulnerability is remotely reachable according to the provided vector and does not require authentication.
What impact can successful exploitation have?
Successful exploitation can allow an attacker to obtain another application's privileges or cause a denial of service through Binder heap memory corruption. Confidentiality, integrity, and availability are all rated as impacted.
How can we determine whether a device is exposed?
Check whether the device runs Android earlier than 5.1.1 LMY48M. Devices at or beyond that identified build are not described as affected by the supplied data.