CVE-2016-0846: High severity Google Android vulnerability
libs/binder/IMemory.cpp in the IMemory Native Interface in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not properly consider the heap size, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26877992.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-0846?
CVE-2016-0846 is considered a critical vulnerability as it allows attackers to gain elevated privileges on affected Android devices.
How do I fix CVE-2016-0846?
To fix CVE-2016-0846, users should update their Android devices to the latest security patches provided by Google.
Which versions of Android are affected by CVE-2016-0846?
CVE-2016-0846 affects Android versions up to 6.0.1, specifically those released before April 1, 2016.
What type of attack does CVE-2016-0846 enable?
CVE-2016-0846 enables attackers to gain elevated privileges through a specially crafted application.
Is my device at risk if it's running an outdated version of Android related to CVE-2016-0846?
Yes, devices running outdated versions of Android that are susceptible to CVE-2016-0846 are at risk of exploitation.