CVE-2015-1536

CVE-2015-1536 is an integer overflow vulnerability in the Android operating system, specifically within the Bitmap_createFromParcel function, affecting versions prior to 5.1.1 LMY48I. An attacker can exploit this by crafting a malicious application that improperly unmarshals bitmaps, leading to a denial of service (system_server crash) or the disclosure of sensitive system_server memory content. With a CVSS score of 8.5, this vulnerability is considered highly severe due to its network-based attack vector and low attack complexity, allowing unauthenticated attackers to cause significant impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.