The Jumio SDK before 1.5.0 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly passes an attacker-controlled pointer to a native function.
CVSS 2.0
Severity: HIGH
Problem Type: CWE-118,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| jumio | jumio_sdk | * |