CVE-2015-3860
published 2015-10-01CVE-2015-3860: packages/Keyguard/res/layout/keyguard_password_view.xml in Lockscreen in Android 5.x before 5.1.1 LMY48M does not restrict the number of characters in the…
PriorityP429high7.2CVSS 2.0
AVLACLAuNCCICAC
EPSS
0.34%
26.4th percentile
packages/Keyguard/res/layout/keyguard_password_view.xml in Lockscreen in Android 5.x before 5.1.1 LMY48M does not restrict the number of characters in the passwordEntry input field, which allows physically proximate attackers to bypass intended access restrictions via a long password that triggers a SystemUI crash, aka internal bug 22214934.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | <= 5.1 | — | |
| android | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-2pcg-v64r-g52w: packages/Keyguard/res/layout/keyguard_password_view
ghsa_unreviewed·2022-05-17
CVE-2015-3860 [HIGH] CWE-284 GHSA-2pcg-v64r-g52w: packages/Keyguard/res/layout/keyguard_password_view
packages/Keyguard/res/layout/keyguard_password_view.xml in Lockscreen in Android 5.x before 5.1.1 LMY48M does not restrict the number of characters in the passwordEntry input field, which allows physically proximate attackers to bypass intended access restrictions via a long password that triggers a SystemUI crash, aka internal bug 22214934.
Android
CVE-2015-3860: Android Security Bulletin 2015-09-01
CVE: CVE-2015-3860
Severity: MEDIUM
Affected AOSP versions: 5
vendor_android·2015-09-01·CVSS 7.2
CVE-2015-3860 [HIGH] CVE-2015-3860: Android Security Bulletin 2015-09-01
CVE: CVE-2015-3860
Severity: MEDIUM
Affected AOSP versions: 5
Android Security Bulletin 2015-09-01
CVE: CVE-2015-3860
Severity: MEDIUM
Affected AOSP versions: 5.1 and 5.0
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://sites.utexas.edu/iso/2015/09/15/android-5-lockscreen-bypass/https://android.googlesource.com/platform/frameworks/base/+/8fba7e6931245a17215e0e740e78b45f6b66d590https://code.google.com/p/android/issues/detail?id=178139https://groups.google.com/forum/message/raw?msg=android-security-updates/1M7qbSvACjo/Y7jewiW1AwAJhttp://sites.utexas.edu/iso/2015/09/15/android-5-lockscreen-bypass/https://android.googlesource.com/platform/frameworks/base/+/8fba7e6931245a17215e0e740e78b45f6b66d590https://code.google.com/p/android/issues/detail?id=178139https://groups.google.com/forum/message/raw?msg=android-security-updates/1M7qbSvACjo/Y7jewiW1AwAJ
2015-10-01
Published