CVE-2015-1528

CVE-2015-1528 describes an integer overflow vulnerability in the native_handle_create function within Android's libcutils/native_handle.c, affecting Android versions prior to 5.1.1 LMY48M. This critical flaw allows a crafted application to achieve privilege escalation, gaining access to another application's privileges, or cause a denial of service through Binder heap memory corruption. With a CVSS score of 9.3, it is a high-severity vulnerability that can be exploited remotely with medium attack complexity. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.