CVE-2015-3854: High severity android vulnerability
packages/SystemUI/src/com/android/systemui/power/PowerNotificationWarnings.java in Android 5.x allows attackers to bypass a DEVICEPOWER permission requirement via a broadcast intent with the PNW.stopSaver action, aka internal bug 20918350.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-3854?
CVE-2015-3854 has been classified as a high severity vulnerability due to its potential to allow unauthorized access to power management functionalities.
How do I fix CVE-2015-3854?
To patch CVE-2015-3854, update your Android device to a version later than 5.1.1, as the vulnerability is resolved in these subsequent releases.
What systems are affected by CVE-2015-3854?
CVE-2015-3854 affects Android operating system versions 5.0, 5.0.1, 5.0.2, 5.1, 5.1.0, and 5.1.1.
What type of attack does CVE-2015-3854 facilitate?
CVE-2015-3854 enables attackers to bypass the DEVICE_POWER permission requirement via a malicious broadcast intent.
What should I do if I cannot update my device for CVE-2015-3854?
If you cannot update your device, consider implementing restrictions on app installations and monitoring for unusual behavior to mitigate the risk associated with CVE-2015-3854.