CVE-2015-3860

packages/Keyguard/res/layout/keyguard_password_view.xml in Lockscreen in Android 5.x before 5.1.1 LMY48M does not restrict the number of characters in the…

published October 1, 2015

CVSS
—
EPSS
0%
Percentile
29.9
In the wild
Unconfirmed
What it is

packages/Keyguard/res/layout/keyguard_password_view.xml in Lockscreen in Android 5.x before 5.1.1 LMY48M does not restrict the number of characters in the passwordEntry input field, which allows physically proximate attackers to bypass intended access restrictions via a long password that triggers a SystemUI crash, aka internal bug 22214934.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00374 · 29.9th percentile
Published
2015-10-01T00:00Z
EPSS history
Timeline
  • 01 OCT 00:00Z
    packages/Keyguard/res/layout/keyguard_password_view.xml in Lockscreen in Android 5.x before 5.1.1 LMY48M does not restrict the number of characters in the…
    cvelistv5