media/libmedia/IAudioPolicyService.cpp in Android before 5.1 allows attackers to execute arbitrary code with media_server privileges or cause a denial of service (integer overflow) via a crafted application that provides an invalid array size.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1530
Reference (s):
- https://android.googlesource.com/platform/frameworks/av/+/74adca9%5E!/