PT-2017-1021 · Google · Android

Published 2017-01-12 · Updated 2017-01-24 · CVE-2016-8442

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Android versions Kernel 3.18

Description The issue is related to insufficient input validation, which could allow unauthorized memory access in the hypervisor. This may enable a local attacker to access hypervisor memory using the HLOS.

Recommendations For Android version Kernel 3.18, consider restricting access to the hypervisor memory as a temporary mitigation measure until a patch is available.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2017-00056

CVE-2016-8442

Affected Products

Android

References · 5

• https://bdu.fstec.ru/vul/2017-00056 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-8442 · Security Note
• https://osv.dev/vulnerability/CVE-2016-8442 · Vendor Advisory
• https://source.android.com/security/bulletin/2017-01-01.html · Vendor Advisory
• http://securityfocus.com/bid/95227 · Note