Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 01/10/2015 Updated: 01/10/2015

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

VMScore: 641

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

packages/Keyguard/res/layout/keyguard_password_view.xml in Lockscreen in Android 5.x prior to 5.1.1 LMY48M does not restrict the number of characters in the passwordEntry input field, which allows physically proximate malicious users to bypass intended access restrictions via a long password that triggers a SystemUI crash, aka internal bug 22214934.

Vulnerable Product	Search on Vulmon	Subscribe to Product
google android

CWE-284 https://android.googlesource.com/platform/frameworks/base/+/8fba7e6931245a17215e0e740e78b45f6b66d590 http://sites.utexas.edu/iso/2015/09/15/android-5-lockscreen-bypass/https://groups.google.com/forum/message/raw?msg=android-security-updates/1M7qbSvACjo/Y7jewiW1AwAJ https://code.google.com/p/android/issues/detail?id=178139 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2015-3860

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect