Back to CVE Browser

CVE-2015-1474

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1900%

EPSS Percentile23.62th

PublishedFeb 16, 2015

Last ModifiedMay 6, 2026

Vulnerability Description

Multiple integer overflows in the GraphicBuffer::unflatten function in platform/frameworks/native/libs/ui/GraphicBuffer.cpp in Android through 5.0 allow attackers to gain privileges or cause a denial of service (memory corruption) via vectors that trigger a large number of (1) file descriptors or (2) integer values.

Affected Platforms (CPE)

💻

Google

Android

<= 5.0

References & Advisories

🔗 http://packetstormsecurity.com/files/130778/Google-Android-Integer-Oveflow-Heap-Corruption.html

🔗 http://seclists.org/fulldisclosure/2015/Mar/63

🔗 http://www.securityfocus.com/bid/72788

🔗 http://www.securitytracker.com/id/1031875

🔗 https://android.googlesource.com/platform/frameworks/native/+/38803268570f90e97452cd9a30ac831661829091

🔗 https://www.blackhat.com/docs/us-15/materials/us-15-Gong-Fuzzing-Android-System-Services-By-Binder-Call-To-Escalate-Privilege.pdf

🔗 http://packetstormsecurity.com/files/130778/Google-Android-Integer-Oveflow-Heap-Corruption.html

🔗 http://seclists.org/fulldisclosure/2015/Mar/63

Related Vulnerabilities

CVE-2019-1106310.0

A broken access control vulnerability in SmartHome app (Android versions up to 3.0.42_190515, ios versions up to 2.0.22) allows an...

CVE-2013-136810.0

Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x befo...

CVE-2018-696810.0

The VMware AirWatch Agent for Android prior to 8.2 and AirWatch Agent for Windows Mobile prior to 6.5.2 contain a remote code exec...

CVE-2012-525410.0

Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 ...