Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2016-3861

LibUtils in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 mishandles conversions between Unicode character encodings with different encoding widths, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted file, aka internal bug 29250543.

Published

2016-09-11T21:59:03.100

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 7.8 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: COMPLETE
Integrity Impact: COMPLETE
Availability Impact: COMPLETE

Exploitability Score

8.6

Impact Score

10.0

Weaknesses

Type: Primary
CWE-119
CWE-264

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	google	android	4.0	Yes
Operating System	google	android	4.0.1	Yes
Operating System	google	android	4.0.2	Yes
Operating System	google	android	4.0.3	Yes
Operating System	google	android	4.0.4	Yes
Operating System	google	android	4.1	Yes
Operating System	google	android	4.1.2	Yes
Operating System	google	android	4.2	Yes
Operating System	google	android	4.2.1	Yes
Operating System	google	android	4.2.2	Yes
Operating System	google	android	4.3	Yes
Operating System	google	android	4.3.1	Yes
Operating System	google	android	4.4	Yes
Operating System	google	android	4.4.1	Yes
Operating System	google	android	4.4.2	Yes
Operating System	google	android	4.4.3	Yes
Operating System	google	android	5.0	Yes
Operating System	google	android	5.0.1	Yes
Operating System	google	android	5.1	Yes
Operating System	google	android	5.1.0	Yes
Operating System	google	android	6.0	Yes
Operating System	google	android	6.0.1	Yes
Operating System	google	android	7.0	Yes

References

http://source.android.com/security/bulletin/2016-09-01.html Vendor Advisory ([email protected])
http://www.securityfocus.com/bid/92811 ([email protected])
http://www.securitytracker.com/id/1036763 ([email protected])
https://android.googlesource.com/platform/frameworks/av/+/3944c65637dfed14a5a895685edfa4bacaf9f76e Issue Tracking, Patch ([email protected])
https://android.googlesource.com/platform/frameworks/base/+/866dc26ad4a98cc835d075b627326e7d7e52ffa1 Issue Tracking, Patch ([email protected])
https://android.googlesource.com/platform/frameworks/native/+/1f4b49e64adf4623eefda503bca61e253597b9bf Issue Tracking, Patch ([email protected])
https://android.googlesource.com/platform/system/core/+/ecf5fd58a8f50362ce9e8d4245a33d56f29f142b Issue Tracking, Patch ([email protected])
https://www.exploit-db.com/exploits/40354/ ([email protected])
http://source.android.com/security/bulletin/2016-09-01.html Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/92811 (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1036763 (af854a3a-2127-422b-91ae-364da2661108)
https://android.googlesource.com/platform/frameworks/av/+/3944c65637dfed14a5a895685edfa4bacaf9f76e Issue Tracking, Patch (af854a3a-2127-422b-91ae-364da2661108)
https://android.googlesource.com/platform/frameworks/base/+/866dc26ad4a98cc835d075b627326e7d7e52ffa1 Issue Tracking, Patch (af854a3a-2127-422b-91ae-364da2661108)
https://android.googlesource.com/platform/frameworks/native/+/1f4b49e64adf4623eefda503bca61e253597b9bf Issue Tracking, Patch (af854a3a-2127-422b-91ae-364da2661108)
https://android.googlesource.com/platform/system/core/+/ecf5fd58a8f50362ce9e8d4245a33d56f29f142b Issue Tracking, Patch (af854a3a-2127-422b-91ae-364da2661108)
https://www.exploit-db.com/exploits/40354/ (af854a3a-2127-422b-91ae-364da2661108)