Telephony in Android 5.x before 5.1.1 LMY48X allows attackers to gain privileges, and consequently bypass intended network-interface restrictions, perform expensive data transfers, or cause a denial of service (call-reception outage or mute manipulation), via a crafted application, aka internal bug 21900139.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Android | 5.0 (including) | 5.0 (including) | |
| Android | 5.1 (including) | 5.1 (including) | |
| Android | Ubuntu | devel | * |
| Android | Ubuntu | trusty | * |
| Android | Ubuntu | upstream | * |
| Android | Ubuntu | vivid | * |
| Android | Ubuntu | vivid/stable-phone-overlay | * |
| Android | Ubuntu | wily | * |