CVE-2015-3854

State: Published
Severity: Not scored
Published: Aug 7, 2016
Updated: Aug 6, 2024
Reserved: May 12, 2015

Description

packages/SystemUI/src/com/android/systemui/power/PowerNotificationWarnings.java in Android 5.x allows attackers to bypass a DEVICE_POWER permission requirement via a broadcast intent with the PNW.stopSaver action, aka internal bug 20918350.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

20160526 CVE-2015-3854 Battery permission leakage in Androidmailing-list
20160526 Re: CVE-2015-3854 Battery permission leakage in Androidmailing-list
https://android.googlesource.com/platform/frameworks/base/+/05e0705177d2078fa9f940ce6df723312cfab976

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.