CVE-2016-0805: High severity Google Android vulnerability

Published Feb 1, 2016

Updated

The performance event manager for Qualcomm ARM processors in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows attackers to gain privileges via a crafted application, aka internal bug 25773204.

Affected Software

25 affected components

Google Android=4.0

Google Android=4.0.1

Google Android=4.0.2

Google Android=4.0.3

Google Android=4.0.4

Google Android=4.1

Google Android=4.1.2

Google Android=4.2

Google Android=4.2.1

Google Android=4.2.2

Google Android=4.3

Google Android=4.3.1

Google Android=4.4

Google Android=4.4.1

Google Android=4.4.2

Google Android=4.4.3

Google Android=5.0

Google Android=5.0.1

Google Android=5.0.2

Google Android=5.1

Google Android=5.1.0

Google Android=5.1.1

Google Android=6.0

Google Android=6.0.1

Google Android

Event History

Feb 1, 2016

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityAffected Software

Feb 7, 2016

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-0805?

CVE-2016-0805 has a medium severity rating, indicating a vulnerability that can potentially allow privilege escalation.

How do I fix CVE-2016-0805?

To fix CVE-2016-0805, update your Android device to version 4.4.4 or later, 5.1.1 or later, or 6.0 or later.

What versions of Android are affected by CVE-2016-0805?

CVE-2016-0805 affects Android versions 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01.

What type of attack can CVE-2016-0805 enable?

CVE-2016-0805 can enable attackers to gain elevated privileges on affected Android devices through a crafted application.

Is there a workaround for CVE-2016-0805 if I cannot update?

Currently, there are no known effective workarounds for CVE-2016-0805, so it is highly recommended to apply the available security updates.