Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Ronald L. Loor Vargas

#38623of 53,633
7.2Total CVSS
Vulnerabilities · 1
PT-2016-5718
7.2
2016-09-11
Google · Android · CVE-2016-3886
**Name of the Vulnerable Software and Affected Versions** Android versions prior to 2016-09-01 **Description** The issue allows physically proximate attackers to gain privileges by modifying a setting on the lockscreen, due to the System UI Tuner not preventing tuner changes. This is related to the `systemui/statusbar/phone/QuickStatusBarHeader.java` file. **Recommendations** For Android versions prior to 2016-09-01, consider restricting access to the System UI Tuner on the lockscreen to minimize the risk of exploitation.