Unrated severityNVD Advisory· Published Aug 3, 2009· Updated Jun 16, 2026

CVE-2009-2656

Description

Unspecified vulnerability in the com.android.phone process in Android 1.0, 1.1, and 1.5 allows remote attackers to cause a denial of service (network disconnection) via a crafted SMS message, as demonstrated by Collin Mulliner and Charlie Miller at Black Hat USA 2009.

Affected products

Google/Android4 versions
cpe:2.3:o:google:android:1.0:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:google:android:1.0:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:1.1:*:*:*:*:*:*:*
- cpe:2.3:o:google:android:1.5:*:*:*:*:*:*:*
- (no CPE)range: >=1.0, <=1.5

Patches

Vulnerability mechanics

References

www.blackhat.com/presentations/bh-usa-09/MILLER/BHUSA09-Miller-FuzzingPhone-PAPER.pdfnvdExploitThird Party Advisory
www.securityfocus.com/bid/35886nvdThird Party AdvisoryVDB Entry
osvdb.org/56750nvdBroken Link

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000