CVE-2015-3840: Medium severity android vulnerability
The MessageStatusReceiver service in the AndroidManifest.XML in Android 5.1.1 and earlier allows local users to alter sent/received statuses of SMS and MMS messages without the associated "WRITESMS" permission.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-3840?
CVE-2015-3840 is rated as a moderate severity vulnerability that allows local users to alter SMS and MMS message statuses.
How does CVE-2015-3840 affect Android devices?
CVE-2015-3840 affects Android devices running versions 5.1.1 and earlier, allowing unauthorized status modifications without the WRITE_SMS permission.
Who is affected by CVE-2015-3840?
Users of Android 5.1.1 and earlier can be affected if local users exploit the vulnerability to modify SMS and MMS statuses.
What actions can be taken to mitigate CVE-2015-3840?
To mitigate CVE-2015-3840, users should upgrade to a later version of Android where the vulnerability has been addressed.
Is CVE-2015-3840 a remote exploit?
No, CVE-2015-3840 is not a remote exploit; it requires local access to the affected device to manipulate message statuses.