PT-2025-15615

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A logical bug exists in handling lazy-loaded values during unparceling. This issue is being actively exploited. Recommendations: At the moment, there is no information about a newer version...

Android Arbitrary class loading and instantiation in protobuf parcelable "javanano" compiler

The protobuf library includes the "javanano" compiler, commonly used in many Android applications due to its tiny resource footprint. The "javanano" compiler supports a variety of Android-specific compilation flags which can be used to modify the generated message classes. One such compilation fl...