7 matches found
Android Code Execution
The vulnerability of the RegioncreateFromParcel function in the Android operating system is related to deficiencies in access control for certain functions. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted application...
CVE-2015-3849
The RegioncreateFromParcel function in core/jni/android/graphics/Region.cpp in Region in Android before 5.1.1 LMY48M does not check the return values of certain read operations, which allows attackers to execute arbitrary code via an application that sends a crafted message to a service, aka...
Design/Logic Flaw
The RegioncreateFromParcel function in core/jni/android/graphics/Region.cpp in Region in Android before 5.1.1 LMY48M does not check the return values of certain read operations, which allows attackers to execute arbitrary code via an application that sends a crafted message to a service, aka...
CVE-2015-3849: Undefined Security Weakness
The RegioncreateFromParcel function in core/jni/android/graphics/Region.cpp in Region in Android before 5.1.1 LMY48M does not check the return values of certain read operations, which allows attackers to execute arbitrary code via an application that sends a crafted message to a service, aka...
CVE-2015-3849
The RegioncreateFromParcel function in core/jni/android/graphics/Region.cpp in Region in Android before 5.1.1 LMY48M does not check the return values of certain read operations, which allows attackers to execute arbitrary code via an application that sends a crafted message to a service, aka...
CVE-2015-3849
CVE-2015-3849 affects Android before 5.1.1 LMY48M, where Region_createFromParcel in core/jni/android/graphics/Region.cpp does not check the return values of certain reads, enabling an attacker to execute arbitrary code by sending a crafted message to a service. The issue is described as an “eleva...
CVE-2015-3849
The RegioncreateFromParcel function in core/jni/android/graphics/Region.cpp in Region in Android before 5.1.1 LMY48M does not check the return values of certain read operations, which allows attackers to execute arbitrary code via an application that sends a crafted message to a service, aka...