Description
Telephony in Android 5.x before 5.1.1 LMY48X allows attackers to gain privileges, and consequently bypass intended network-interface restrictions, perform expensive data transfers, or cause a denial of service (call-reception outage or mute manipulation), via a crafted application, aka internal bug 21900139.
References
- [android-security-updates] 20151102 Nexus Security Bulletin (November 2015) mailing-list
- 1034049 vdb-entry