NVD

Id
23821  
Name
CVE-2015-1536  
Description
Integer overflow in the Bitmap_createFromParcel function in core/jni/android/graphics/Bitmap.cpp in Android before 5.1.1 LMY48I allows attackers to cause a denial of service (system_server crash) or obtain sensitive system_server memory-content information via a crafted application that leverages improper unmarshalling of bitmaps, aka internal bug 19666945.  
Reject
 
CVSS Version
2  
CVSS Score
8.5  
Severity
High  
CVSS Base Score
8.5  
CVSS Impact Subscore
7.8  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:C)  
Pub Date
2017-01-19  
Published
2015-09-30  
Modified Date
2015-10-01  
Seq
2015-1536  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
126559 23821 CVE-2015-1536 https://android.googlesource.com/platform/frameworks/base/+/d44e5bde18a41beda39d49189bef7f2ba7c8f3cb  View
126560 23821 CVE-2015-1536 [android-security-updates] 20150812 Nexus Security Bulletin (August 2015)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
5498 JVNDB-2014-008136 Android の core/jni/android/graphics/Bitmap.cpp の Bitmap_createFromParcel 関数における整数オーバーフローの脆弱性 Android の core/jni/android/graphics/Bitmap.cpp の Bitmap_createFromParcel 関数には、整数オーバーフローの脆弱性が存在します。 CVE-2015-1536 78761 CVE-2015-1536 23821 8.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-008136.html 2015-07-09 2015-10-02 View