Skip to content

Commit 380fb39

Browse files
committed
CVE-2015-1474 was misnamed as CVE-2014-1528
1 parent d04fe12 commit 380fb39

File tree

3 files changed

+20
-3
lines changed

3 files changed

+20
-3
lines changed

app/src/main/assets/vuln_map.json

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -52,6 +52,25 @@
5252
],
5353
"cvedate": "09/30/2015"
5454
},
55+
"CVE-2015-1474": {
56+
"cve": "CVE-2015-1474",
57+
"altnames": [
58+
],
59+
"description": "Multiple integer overflows in the GraphicBuffer::unflatten function in platform/frameworks/native/libs/ui/GraphicBuffer.cpp in Android through 5.0 allow attackers to gain privileges or cause a denial of service (memory corruption) via vectors that trigger a large number of (1) file descriptors or (2) integer values.",
60+
"impact": "Local unprivileged app to system app escalation + accesible via the network",
61+
"external_links": [
62+
"http://seclists.org/fulldisclosure/2015/Mar/63",
63+
"https://github.com/p1gl3t/CVE-2015-1474_poc",
64+
"https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-1474",
65+
"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1474"
66+
],
67+
"cvssv2": 9.3,
68+
"patch": [
69+
"https://android.googlesource.com/platform/frameworks/native/+/e6f7a44e835d320593fa33052f35ea52948ff0b2",
70+
"https://android.googlesource.com/platform/frameworks/native/+/796aaf7fb160fea12bddc8406d7f006ce811eb43"
71+
],
72+
"cvedate": "09/30/2015"
73+
},
5574
"JarBug13678484": {
5675
"cve": "JarBug13678484",
5776
"altnames": [

app/src/main/java/fuzion24/device/vulnerability/util/DeviceInfo.java

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -61,7 +61,6 @@ private DeviceInfo(String kVer,
6161
}
6262

6363
public static DeviceInfo getDeviceInfo() {
64-
6564
String kVer = readKernelVersion();
6665
String bManufac = Build.MANUFACTURER;
6766
String bBrand = Build.BRAND;

app/src/main/java/fuzion24/device/vulnerability/vulnerabilities/framework/graphics/GraphicBufferTest.java

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ public int getIntCode(){
3939

4040
@Override
4141
public String getCVEorID() {
42-
return "CVE-2015-1528";
42+
return "CVE-2015-1474";
4343
}
4444

4545
@Override
@@ -57,7 +57,6 @@ public List<CPUArch> getSupportedArchitectures() {
5757
public boolean isVulnerable(Context context) throws Exception {
5858
int checkVal;
5959

60-
6160
if(Build.VERSION.SDK_INT >= Build.VERSION_CODES.KITKAT && Build.VERSION.SDK_INT < Build.VERSION_CODES.M) {
6261
Log.d(TAG, "Running with KK and Lollipop types");
6362
checkVal = checkGraphicsBuffer(AndroidVersions.KITKAT_AND_LOLLIPOP.getIntCode());

0 commit comments

Comments
 (0)