PT-2018-1228 · Google · Android

Published 2018-04-02 · Updated 2018-05-01 · CVE-2016-10450

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level

Description A potential stack-based buffer overflow exists in the thermal service of Android, which can lead to root compromise. The issue is caused by an operation exceeding the buffer boundaries in memory. This can allow a remote attacker to gain access to the device with root privileges.

Recommendations For Android versions prior to 2018-04-05 security patch level, update to a version with a security patch level of 2018-04-05 or later to resolve the issue. As a temporary workaround, consider restricting access to the thermal service to minimize the risk of exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2018-00696

CVE-2016-10450

Affected Products

Android

References · 6

• https://source.android.com/security/bulletin/2018-04-01 · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-00696 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-10450 · Security Note
• http://securityfocus.com/bid/103671 · Note
• https://vuldb.com/?id.116511 · Note
• https://vulnerabilitycenter.com/#!vul=83744 · Note