CVE-2009-1754

The CVE-2009-1754 entry describes Android 1.5 (CRB42) allowing a package to share a UID without proper verification of developer certificates during installation. This enables a remote, user‑assisted attacker to access data from other apps by installing a package that uses a sharedUserId with arb...

CVE-2009-2348

Android 1.5 CRBxx allows local users to bypass CAMERA and AUDIO_RECORD permission checks by installing an app that does not request permissions before using the camera or microphone. Affected: all 1.5 CRBxx variants. Root cause: improper permission verification in Android’s runtime/device policy ...

CVE-2009-2656

The CVE-2009-2656 entry concerns an unspecified vulnerability in the com.android.phone process on Android 1.0/1.1/1.5 that allows remote attackers to cause a denial of service (network disconnection) by sending a crafted SMS. The issue was demonstrated by Collin Mulliner and Charlie Miller at Bla...

CVE-2009-2999

The CVE-2009-2999 entry affects Android 1.5 CRBxx: remote attackers can cause a DoS (application restart and network disconnection) by sending a malformed WAP Push SMS, triggering an ArrayIndexOutOfBoundsException in com.android.phone. Connected sources confirm a Malformed SMS DoS with fixed vers...

CVE-2009-3698

CVE-2009-3698 describes a vulnerability in the Dalvik API used by Android 1.5 and earlier. An unspecified function in the Dalvik API can be triggered by a crafted application to cause a denial of service (system process restart). The issue is potentially related to CVE-2009-2656, indicating a fam...