high7.5
CVE-2015-3854
packages/SystemUI/src/com/android/systemui/power/PowerNotificationWarnings.java in Android 5.x allows attackers to bypass a DEVICE_POWER permission requirement…
Impact
packages/SystemUI/src/com/android/systemui/power/PowerNotificationWarnings.java in Android 5.x allows attackers to bypass a DEVICE_POWER permission requirement via a broadcast intent with the PNW.stopSaver action, aka internal bug 20918350.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Android | Versions 5.0, 5.0.1, 5.0.2, 5.1, 5.1.0, 5.1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2016/May/71
- http://seclists.org/fulldisclosure/2016/May/72
- https://android.googlesource.com/platform/frameworks/base/+/05e0705177d2078fa9f940ce6df723312cfab976
- http://seclists.org/fulldisclosure/2016/May/71
- http://seclists.org/fulldisclosure/2016/May/72
- https://android.googlesource.com/platform/frameworks/base/+/05e0705177d2078fa9f940ce6df723312cfab976