CVE-2015-3833: Google Android

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

The getRunningAppProcesses function in services/core/java/com/android/server/am/ActivityManagerService.java in Android before 5.1.1 LMY48I allows attackers to bypass intended getRecentTasks restrictions and discover the name of the foreground application via a crafted application, aka internal bug 20034603.

Affected products

• Google Android: up to and including 5.1

Published 2015-10-01. Last modified 2026-06-17.