CVE-2015-4034

Description

The createFromParcel method in the com.absolute.android.persistence.MethodSpec class in Samsung Galaxy S5s allows remote attackers to execute arbitrary files via a crafted Parcelable object in a serialized MethodSpec object.

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• http://www.securityfocus.com/bid/75403
• http://www.zerodayinitiative.com/advisories/ZDI-15-256/
• http://www.securityfocus.com/bid/75403
• http://www.zerodayinitiative.com/advisories/ZDI-15-256/

CWEs

CWE-284