CVE-2015-3839

The updateMessageStatus function in Android 5.1.1 and earlier allows local users to cause a denial of service (NULL pointer exception and process crash).

Score

CVSS 3.0 5.5 Medium

Status

Modified - security@android.com

Published

2017-08-07

Last modified

2024-08-06

Weaknesses

CWE-476

Affected products

• Android (Google)

References

• http://blog.trendmicro.com/trendlabs-security-intelligence/os-x-zero-days-on-the-rise-a-2015-midyear-review-on-advanced…
• http://blog.trendmicro.com/trendlabs-security-intelligence/two-new-android-bugs-mess-up-messaging-may-lead-to-multiple-…
• http://www.securityfocus.com/bid/100158
• https://huntcve.github.io/2017/02/13/cveupdate/