CVE-2015-3865

CVE-2015-3865 is a critical privilege escalation vulnerability affecting the Runtime subsystem in Android versions prior to 5.1.1 LMY48T, allowing a malicious application to gain elevated permissions like Signature or SignatureOrSystem access. With a CVSS score of 9.3, it represents a high-severity risk, enabling remote attackers to achieve complete compromise of confidentiality, integrity, and availability with medium attack complexity. Despite its severity, there is no evidence of active exploitation, publicly available exploit code in Metasploit or ExploitDB, nor significant community discussion or media coverage.