Description
The MetaIO SDK before 6.0.2.1 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly passes an attacker-controlled pointer to a native function.
Unscored
CVE-2015-2001
EUVD-2015-2114GHSA-x2vq-qwv5-pqx3
The MetaIO SDK before 6.0.2.1 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable…
Published Mar 29, 2018 · Updated Aug 6, 2024 · Assigned by ibm