PT-2020-7805 · Google · Android

Published 2020-01-24 · Updated 2020-01-28 · CVE-2015-1530

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Android versions prior to 5.1

Description: The issue allows attackers to execute arbitrary code with media server privileges or cause a denial of service due to an integer overflow. This can be achieved via a crafted application that provides an invalid array size in the media/libmedia/IAudioPolicyService.cpp component.

Recommendations: For Android versions prior to 5.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2015-1530

Affected Products

Android

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2015-1530 · Security Note
• https://android.googlesource.com/platform/frameworks/av/+/74adca9%5E%21 · Note