CVE-2015-1536
published 2015-10-01CVE-2015-1536: Integer overflow in the Bitmap_createFromParcel function in core/jni/android/graphics/Bitmap.cpp in Android before 5.1.1 LMY48I allows attackers to cause a…
PriorityP431high8.5CVSS 2.0
AVNACLAuNCPINAC
EPSS
0.67%
48.4th percentile
Integer overflow in the Bitmap_createFromParcel function in core/jni/android/graphics/Bitmap.cpp in Android before 5.1.1 LMY48I allows attackers to cause a denial of service (system_server crash) or obtain sensitive system_server memory-content information via a crafted application that leverages improper unmarshalling of bitmaps, aka internal bug 19666945.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | <= 5.1 | — | |
| android | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Android
CVE-2015-1536: Android Security Bulletin 2015-08-01
CVE: CVE-2015-1536
Severity: MEDIUM
Affected AOSP versions: 5
vendor_android·2015-08-01·CVSS 8.5
CVE-2015-1536 [HIGH] CVE-2015-1536: Android Security Bulletin 2015-08-01
CVE: CVE-2015-1536
Severity: MEDIUM
Affected AOSP versions: 5
Android Security Bulletin 2015-08-01
CVE: CVE-2015-1536
Severity: MEDIUM
Affected AOSP versions: 5.1 and below
GHSA
GHSA-fph8-rc79-r924: Integer overflow in the Bitmap_createFromParcel function in core/jni/android/graphics/Bitmap
ghsa_unreviewed·2022-05-17
CVE-2015-1536 [HIGH] GHSA-fph8-rc79-r924: Integer overflow in the Bitmap_createFromParcel function in core/jni/android/graphics/Bitmap
Integer overflow in the Bitmap_createFromParcel function in core/jni/android/graphics/Bitmap.cpp in Android before 5.1.1 LMY48I allows attackers to cause a denial of service (system_server crash) or obtain sensitive system_server memory-content information via a crafted application that leverages improper unmarshalling of bitmaps, aka internal bug 19666945.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://android.googlesource.com/platform/frameworks/base/+/d44e5bde18a41beda39d49189bef7f2ba7c8f3cbhttps://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJhttps://android.googlesource.com/platform/frameworks/base/+/d44e5bde18a41beda39d49189bef7f2ba7c8f3cbhttps://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ
2015-10-01
Published