CVE-2015-9546

CVE-2015-9546 describes a directory traversal vulnerability in Samsung mobile devices running Android KitKat (4.4) and later, up to June 16, 2015. The flaw stems from an Inputmethod using unencrypted HTTP, allowing a man-in-the-middle attacker to inject directory traversal sequences into extracted file paths. Rated Medium (CVSS 4.8), this vulnerability requires high attack complexity and could lead to limited confidentiality and integrity impacts. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.