AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2015-3858

HIGH · CVSS 9.3 EPSS 0.69%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2015-10-01 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2015-3858
Severity
HIGH
CVSS
9.3
EPSS
0.69%
Android Java

Original Filing — NVD Description

The checkDestination function in internal/telephony/SMSDispatcher.java in Android before 5.1.1 LMY48M relies on an obsolete permission name for an authorization check, which allows attackers to bypass an intended user-confirmation requirement for SMS short-code messaging via a crafted application, aka internal bug 22314646.