PT-2016-5708 · Google · Android

Makoto Onuki · Published 2016-09-11 · Updated 2017-08-13 · CVE-2016-3876

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android versions 6.x through 7.0 before 2016-09-01

Description The issue allows physically proximate attackers to bypass the SAFE BOOT DISALLOWED protection mechanism and boot to safe mode via the Android Debug Bridge (adb) tool.

Recommendations For Android versions 6.x through 7.0, update to a version released after 2016-09-01 to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2016-3876

Affected Products

Android

References · 9

• https://ubuntu.com/security/CVE-2016-3876 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-3876 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-3876 · Security Note
• http://source.android.com/security/bulletin/2016-09-01.html · Vendor Advisory
• https://android.googlesource.com/platform/frameworks/base/+/91fc934bb2e5ea59929bb2f574de6db9b5100745 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-3876 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-3876 · Vendor Advisory
• http://securitytracker.com/id/1036763 · Note
• http://securityfocus.com/bid/92819 · Note