Critical severity9.8NVD Advisory· Published Mar 29, 2018· Updated Jun 17, 2026
CVE-2015-2001
CVE-2015-2001
Description
The MetaIO SDK before 6.0.2.1 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly passes an attacker-controlled pointer to a native function.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:metaio:metaio_sdk:*:*:*:*:*:android:*:*+ 1 more
- cpe:2.3:a:metaio:metaio_sdk:*:*:*:*:*:android:*:*range: <6.0.2.1
- (no CPE)range: <6.0.2.1
Patches
Vulnerability mechanics
References
2- alephsecurity.com/vulns/aleph-2015002nvdThird Party Advisory
- www.usenix.org/system/files/conference/woot15/woot15-paper-peles.pdfnvdTechnical DescriptionThird Party Advisory
News mentions
0No linked articles in our index yet.