Description
The ESRI ArcGis Runtime SDK before 10.2.6-2 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly passes an attacker-controlled pointer to a native function.
Unscored
CVE-2015-2002
EUVD-2015-2115GHSA-4hfw-prwp-gw3q
The ESRI ArcGis Runtime SDK before 10.2.6-2 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in …
Published Mar 29, 2018 · Updated Aug 6, 2024 · Assigned by ibm