Security Advisory

CVE-2015-3843

9.3

Vulnerability Description

The SIM Toolkit (STK) framework in Android before 5.1.1 LMY48I allows attackers to (1) intercept or (2) emulate unspecified Telephony STK SIM commands via an application that sends a crafted Intent, related to com/android/internal/telephony/cat/AppInterface.java, aka internal bug 21697171.
Published Date October 1, 2015
Official Source NIST NVD Advisory