VULNERABILITY INTELLIGENCE

CVE-2015-3854

CVSS score7.5 HIGH
EPSS probability0.54%
CISA KEVNot currently listed
Published2016-08-07
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Description

packages/SystemUI/src/com/android/systemui/power/PowerNotificationWarnings.java in Android 5.x allows attackers to bypass a DEVICE_POWER permission requirement via a broadcast intent with the PNW.stopSaver action, aka internal bug 20918350.

Weakness classification

  • CWE-284: Improper Access Control

Primary references