CVE-2015-3849
published 2015-10-01CVE-2015-3849: The Region_createFromParcel function in core/jni/android/graphics/Region.cpp in Region in Android before 5.1.1 LMY48M does not check the return values of…
PriorityP338critical9.3CVSS 2.0
AVNACMAuNCCICAC
EPSS
1.48%
71.4th percentile
The Region_createFromParcel function in core/jni/android/graphics/Region.cpp in Region in Android before 5.1.1 LMY48M does not check the return values of certain read operations, which allows attackers to execute arbitrary code via an application that sends a crafted message to a service, aka internal bug 21585255.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | <= 5.1 | — | |
| android | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Android
CVE-2015-3849: Android Security Bulletin 2015-09-01
CVE: CVE-2015-3849
Severity: HIGH
Affected AOSP versions: 5
vendor_android·2015-09-01·CVSS 9.3
CVE-2015-3849 [CRITICAL] CVE-2015-3849: Android Security Bulletin 2015-09-01
CVE: CVE-2015-3849
Severity: HIGH
Affected AOSP versions: 5
Android Security Bulletin 2015-09-01
CVE: CVE-2015-3849
Severity: HIGH
Affected AOSP versions: 5.1 and below
GHSA
GHSA-3w77-rf68-cjm6: The Region_createFromParcel function in core/jni/android/graphics/Region
ghsa_unreviewed·2022-05-17
CVE-2015-3849 [HIGH] GHSA-3w77-rf68-cjm6: The Region_createFromParcel function in core/jni/android/graphics/Region
The Region_createFromParcel function in core/jni/android/graphics/Region.cpp in Region in Android before 5.1.1 LMY48M does not check the return values of certain read operations, which allows attackers to execute arbitrary code via an application that sends a crafted message to a service, aka internal bug 21585255.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://android.googlesource.com/platform/frameworks/base/+/1e72dc7a3074cd0b44d89afbf39bbf5000ef7cc3https://android.googlesource.com/platform/frameworks/base/+/4cff1f49ff95d990d6c2614da5d5a23d02145885https://groups.google.com/forum/message/raw?msg=android-security-updates/1M7qbSvACjo/Y7jewiW1AwAJhttps://android.googlesource.com/platform/frameworks/base/+/1e72dc7a3074cd0b44d89afbf39bbf5000ef7cc3https://android.googlesource.com/platform/frameworks/base/+/4cff1f49ff95d990d6c2614da5d5a23d02145885https://groups.google.com/forum/message/raw?msg=android-security-updates/1M7qbSvACjo/Y7jewiW1AwAJ
2015-10-01
Published