packages/SystemUI/src/com/android/systemui/power/PowerNotificationWarnings.java in Android 5.x allows attackers to bypass a DEVICE_POWER permission requirement via a broadcast intent with the PNW.stopSaver action, aka internal bug 20918350.
| Software | From | Fixed in |
|---|---|---|
| google / android | 5.1.0 | 5.1.0.x |
| google / android | 5.0.2 | 5.0.2.x |
| google / android | 5.0.1 | 5.0.1.x |
| google / android | 5.0 | 5.0.x |
| google / android | 5.1.1 | 5.1.1.x |
| google / android | 5.1 | 5.1.x |