CVE-2015-4034

Affected software/impact : Samsung Galaxy S5's com.absolute.android.persistence.MethodSpec class is vulnerable to remote code execution via crafted Parcelable objects. The root cause is in the createFromParcel deserialization flow, where dynamic class loading is performed without restricting the ...