Ricky Wai

**Name of the Vulnerable Software and Affected Versions** Android versions prior to 2016-07-01 **Description** The issue is related to errors in security label processing in the ChooserTarget service of the Android operating system. It allows a remote attacker to elevate their privileges using a specially crafted application. The problem lies in the internal/app/ChooserActivity.java script, which mishandles target security checks. **Recommendations** For Android versions prior to 2016-07-01, consider restricting the use of the ChooserTarget service until a patch is available. As a temporary workaround, avoid using the ChooserActivity.java script in the ChooserTarget service to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Android versions prior to 2016-07-01 **Description** The issue is related to errors in handling registration data in the LockSettingsService component. It allows attackers to modify the screen-lock password or pattern via a crafted application. This can be exploited by a local attacker to change the screen lock settings. **Recommendations** For Android versions prior to 2016-07-01, consider restricting the use of the LockSettingsService until a fix is available. As a temporary workaround, avoid using potentially vulnerable screen lock settings to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Android versions prior to 2016-07-01 **Description** The issue is related to the sockets subsystem in Android, which has inadequate access control. This can be exploited by a remote attacker using a specially crafted application to bypass system-call restrictions by making an ioctl call. **Recommendations** For Android versions prior to 2016-07-01, consider restricting access to the ioctl call until a patch is available. As a temporary workaround, avoid using the `ioctl` function in affected applications to minimize the risk of exploitation.