VDB

CVE-2015-3844

CVE-2015-3844 PUBLISHED CVSS 6.800000190734863 MEDIUM

The getProcessRecordLocked method in services/core/java/com/android/server/am/ActivityManagerService.java in ActivityManager in Android before 5.1.1 LMY48I allows attackers to trigger incorrect process loading via a crafted application, as demonstrated by interfering with use of the Settings application, aka internal bug 21669445.

EPSS 0.55% · 44.9th percentile

Risk Scores

CVSS 2.0
6.800000190734863
EPSS Score
0.55%
44.9th percentile

Affected Products

VendorProductVersions
googleandroid0
n/an/an/a

Timeline

  • Oct 1, 2015 CVE Published
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • May 21, 2022 EPSS Score
  • Jul 13, 2022 EPSS Score
  • Sep 5, 2022 EPSS Score
  • Oct 28, 2022 EPSS Score
  • Dec 20, 2022 EPSS Score
  • Feb 11, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 5, 2023 EPSS Score
  • May 28, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›