What is CVE-2015-1805?

CVE-2015-1805 is a vulnerability in Google Android, classified under CWE-17. Published 2015-08-08.

Is CVE-2015-1805 known to be exploited?

41 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Google Android

CVE-2015-1805

The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel before 3.16 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an "I/O vector array overrun."

Published 2015-08-08 · last modified 2026-06-17.

CVSS v2 metric

CVSS v2 base score 7.2 (High). Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.

EPSS exploit prediction

EPSS: 0.014 (71.4th percentile), scored 2026-10-02.

Low probability of exploitation in the next 30 days, but still tracked. 71st percentile — 71.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.014 · newest: 0.014 · change: 0.000

Affected products

Google Android — versions 4.4.3, 5.0.1, 5.1
Linux Kernel

Weakness classification (CWE)

CWE-17

Public proof-of-concept exploits

References

rhn.redhat.com/errata/RHSA-2015-1211.html (vendor-advisory)
www.debian.org/security/2015/dsa-3290 (vendor-advisory)
www.securitytracker.com/id/1032454 (vdb-entry)
lists.opensuse.org/opensuse-security-announce/2015-09/msg00011.html (vendor-advisory)
www.securityfocus.com/bid/74951 (vdb-entry)
rhn.redhat.com/errata/RHSA-2015-1120.html (vendor-advisory)
www.ubuntu.com/usn/USN-2967-1 (vendor-advisory)
lists.opensuse.org/opensuse-security-announce/2015-09/msg00009.html (vendor-advisory)
source.android.com/security/bulletin/2016-05-01.html
bugzilla.redhat.com/show_bug.cgi

Frequently asked questions

What is CVE-2015-1805?: CVE-2015-1805 is a vulnerability in Google Android, classified under CWE-17. Published 2015-08-08.
Is CVE-2015-1805 known to be exploited?: 41 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.