Google · Android · CVE-2016-3886
**Name of the Vulnerable Software and Affected Versions**
Android versions prior to 2016-09-01
**Description**
The issue allows physically proximate attackers to gain privileges by modifying a setting on the lockscreen, due to the System UI Tuner not preventing tuner changes. This is related to the `systemui/statusbar/phone/QuickStatusBarHeader.java` file.
**Recommendations**
For Android versions prior to 2016-09-01, consider restricting access to the System UI Tuner on the lockscreen to minimize the risk of exploitation.