The Region_createFromParcel function in core/jni/android/graphics/Region.cpp in Region in Android before 5.1.1 LMY48M does not check the return values of certain read operations, which allows attackers to execute arbitrary code via an application that sends a crafted message to a service, aka internal bug 21585255.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: google_android
Published: 2015-10-01T00:00:00
Updated: 2024-08-06T05:56:15.907Z
Reserved: 2015-05-12T00:00:00
Link: CVE-2015-3849
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2015-10-01T00:59:26.250
Modified: 2015-10-01T18:07:36.843
Link: CVE-2015-3849
Redhat
No data.