CVE Feed

    Dashboard / CVE / CVE-2015-4034

    CVE-2015-4034

    The createFromParcel method in the com.absolute.android.persistence.MethodSpec class in Samsung Galaxy S5s allows remote attackers to execute arbitrary files via a crafted Parcelable object in a serialized MethodSpec object.

    Published:Jul 6, 2015
    Last Modified:Apr 12, 2025
    EPS:Jul 6, 2015
    EPSS Score:0.00246
    CVSS Score:7.9

    Affected Products

    Vendor
    Samsung
    Product
    Galaxy S5

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-284 Improper Access Control

    Related CVEs

    CVE-2020-35693 (CVSS 8.8) — On some Samsung phones and tablets running Android through 7.1.1, it is possible for an attacker-controlled Bl…
    CVE-2017-18681 (CVSS 9.8) — An issue was discovered on Samsung Galaxy S5 mobile devices with software through 2016-12-20 (Qualcomm AP chip…
    CVE-2016-11038 (CVSS 9.8) — An issue was discovered on Samsung mobile devices with software through 2016-04-05 (incorporating the Samsung …
    CVE-2016-7991 (CVSS 7.5) — On Samsung Galaxy S4 through S7 devices, the "omacp" app ignores security information embedded in the OMACP me…
    CVE-2016-7990 (CVSS 9.8) — On Samsung Galaxy S4 through S7 devices, an integer overflow condition exists within libomacp.so when parsing …
    CVE-2016-7988 (CVSS 7.5) — On Samsung Galaxy S4 through S7 devices, absence of permissions on the BroadcastReceiver responsible for handl…
    CVE-2016-7989 (CVSS 7.5) — On Samsung Galaxy S4 through S7 devices, a malformed OTA WAP PUSH SMS containing an OMACP message sent remotel…
    CVE-2015-4640 (CVSS 2.9) — The SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and S6 devices relies on a…
    CVE-2015-4641 (CVSS 6.4) — Directory traversal vulnerability in the SwiftKey language-pack update implementation on Samsung Galaxy S4, S4…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High