Description
The Jumio SDK before 1.5.0 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly passes an attacker-controlled pointer to a native function.
Unscored
CVE-2015-2000
EUVD-2015-2113GHSA-x5px-6hfx-3338
The Jumio SDK before 1.5.0 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable cl…
Published Mar 29, 2018 · Updated Aug 6, 2024 · Assigned by ibm