Telephony in Android 5.x before 5.1.1 LMY48X allows attackers to gain privileges and consequently bypass intended network-interface restrictions perform expensive data transfers or cause a denial of service (call-reception outage or mute manipulation) via a crafted application aka internal bug 21900139.