CVE-2015-4640

The SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and S6 devices relies on an HTTP connection to the skslm.swiftkey.net server, which allows man-in-the-middle attackers to write to language-pack files by modifying an HTTP response. NOTE: CVE-2015-4640 exploitation can be combined with CVE-2015-4641 exploitation for man-in-the-middle code execution.

• CWE-254

• http://arstechnica.com/security/2015/06/new-exploit-turns-samsung-galaxy-phones-into-remote-bugging-devices/Exploit
• http://www.kb.cert.org/vuls/id/155412Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/75347
• https://github.com/nowsecure/samsung-ime-rce-poc/Exploit
• https://www.nowsecure.com/blog/2015/06/16/remote-code-execution-as-system-user-on-samsung-phones/Exploit
• https://www.nowsecure.com/keyboard-vulnerability/Exploit
• http://arstechnica.com/security/2015/06/new-exploit-turns-samsung-galaxy-phones-into-remote-bugging-devices/Exploit
• http://www.kb.cert.org/vuls/id/155412Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/75347
• https://github.com/nowsecure/samsung-ime-rce-poc/Exploit
• https://www.nowsecure.com/blog/2015/06/16/remote-code-execution-as-system-user-on-samsung-phones/Exploit
• https://www.nowsecure.com/keyboard-vulnerability/Exploit

Published

Jun 19, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-4632Multiple directory traversal vulnerabilities in Koha 3.14.x …
• CVE-2015-4633Multiple SQL injection vulnerabilities in Koha 3.14.x before…
• CVE-2015-4634SQL injection vulnerability in graphs.php in Cacti before 0.…
• CVE-2015-4637The REST API in F5 BIG-IQ Cloud, Device, and Security 4.4.0 …
• CVE-2015-4638The FastL4 virtual server in F5 BIG-IP LTM, AAM, AFM, Analyt…
• CVE-2015-4639Cross-site scripting (XSS) vulnerability in opac-addbybiblio…
• CVE-2015-4641Directory traversal vulnerability in the SwiftKey language-p…
• CVE-2015-4642The escapeshellarg function in ext/standard/exec.c in PHP be…
• CVE-2015-4643Integer overflow in the ftp_genlist function in ext/ftp/ftp.…
• CVE-2015-4644The php_pgsql_meta_data function in pgsql.c in the PostgreSQ…
• CVE-2015-4645Integer overflow in the read_fragment_table_4 function in un…5.5
• CVE-2015-4646(1) unsquash-1.c, (2) unsquash-2.c, (3) unsquash-3.c, and (4…7.5