Vulnerabilities (CVE)

Filtered by CWE-118
Total 25 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-2003 1 Pjsip 1 Pjsua2 Sdk 2026-06-17 7.5 HIGH 9.8 CRITICAL
The PJSIP PJSUA2 SDK before SVN Changeset 51322 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly passes an attacker-controlled pointer to a native function.
CVE-2015-2002 1 Esri 1 Arcgisruntime Sdk 2026-06-17 7.5 HIGH 9.8 CRITICAL
The ESRI ArcGis Runtime SDK before 10.2.6-2 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly passes an attacker-controlled pointer to a native function.
CVE-2015-2001 1 Metaio 1 Metaio Sdk 2026-06-17 7.5 HIGH 9.8 CRITICAL
The MetaIO SDK before 6.0.2.1 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly passes an attacker-controlled pointer to a native function.
CVE-2015-2000 1 Jumio 1 Jumio Sdk 2026-06-17 7.5 HIGH 9.8 CRITICAL
The Jumio SDK before 1.5.0 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly passes an attacker-controlled pointer to a native function.
CVE-2014-9411 1 Google 1 Android 2026-06-17 10.0 HIGH 9.8 CRITICAL
In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially possible in rollback protection.