A vulnerability was found in Google Android up to 5.1.0 (Smartphone Operating System) and classified as very critical. This issue affects an unknown part of the file keystore/keystore.cpp of the component Blob Class. The manipulation with an unknown input leads to a numeric error vulnerability. Using CWE to declare the problem leads to CWE-189. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

Multiple integer overflows in the Blob class in keystore/keystore.cpp in Keystore in Android before 5.1.1 LMY48M allow attackers to execute arbitrary code and read arbitrary Keystore keys via an application that uses a crafted blob in an insert operation, aka internal bug 22802399.

The weakness was shared 10/01/2015 as 22802399 (Website). It is possible to read the advisory at groups.google.com. The identification of this vulnerability is CVE-2015-3863 since 05/12/2015. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Technical details of the vulnerability are known, but there is no available exploit. The pricing for an exploit might be around USD $5k-$25k at the moment (estimation calculated on 01/12/2018). It is expected to see the exploit prices for this product increasing in the near future.

Upgrading to version 5.1.1 eliminates this vulnerability. A possible mitigation has been published before and not just after the disclosure of the vulnerability.

The entries 78161, 78174, 78175 and 78176 are related to this item.

Productinfo

Type

• Smartphone Operating System

Vendor

• Google

Name

• Android

Version

• 5.0
• 5.1

License

• free

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion