CVE-2015-3854

packages/SystemUI/src/com/android/systemui/power/PowerNotificationWarnings.java in Android 5.x allows attackers to bypass a DEVICE_POWER permission requirement via a broadcast intent with the PNW.stopSaver action, aka internal bug 20918350.

Score

CVSS 3.0 7.5 High

Status

Modified - security@android.com

Published

2016-08-07

Last modified

2024-08-06

Weaknesses

CWE-284

Affected products

• Android (Google)

References

• http://seclists.org/fulldisclosure/2016/May/71
• http://seclists.org/fulldisclosure/2016/May/72
• https://android.googlesource.com/platform/frameworks/base/+/05e0705177d2078fa9f940ce6df723312cfab976