CVE-2015-2001

The CVE-2015-2001 entry concerns the MetaIO SDK for Android (before 6.0.2.1). The vulnerability arises in a Serializable class’s finalize method that improperly passes an attacker-controlled pointer to a native function, enabling arbitrary code execution. Connected documents corroborate the vulne...