VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 14, 2009· Updated Jun 16, 2026

CVE-2009-2999

CVE-2009-2999

Description

The com.android.phone process in Android 1.5 CRBxx allows remote attackers to cause a denial of service (application restart and network disconnection) via an SMS message containing a malformed WAP Push message that triggers an ArrayIndexOutOfBoundsException exception, possibly a related issue to CVE-2009-2656.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Google/Android2 versions
    cpe:2.3:o:google:android:1.5:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:google:android:1.5:*:*:*:*:*:*:*
    • (no CPE)range: = 1.5 CRBxx

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.