CVE-2016-0850: High severity Google Android vulnerability
The PORCHEPAIRINGCONFLICT feature in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows remote attackers to bypass intended pairing restrictions via a crafted device, aka internal bug 26551752.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Androidto a version that resolves this vulnerability.Fixed in 4.4.4 - Upgrade
Upgrade
Androidto a version that resolves this vulnerability.Fixed in 5.0.2 - Upgrade
Upgrade
Androidto a version that resolves this vulnerability.Fixed in 5.1.1 - Upgrade
Upgrade
Androidto a version that resolves this vulnerability.Patch 26551752
Event History
Frequently Asked Questions
What is the severity of CVE-2016-0850?
The severity of CVE-2016-0850 is classified as high due to its potential to allow remote attackers to bypass pairing restrictions.
How do I fix CVE-2016-0850?
To fix CVE-2016-0850, update your Android device to the latest version that is patched against this vulnerability.
What systems are affected by CVE-2016-0850?
CVE-2016-0850 affects Android versions 4.0 through 6.0.1 prior to specified updates.
What type of attack does CVE-2016-0850 enable?
CVE-2016-0850 enables remote attackers to exploit Bluetooth pairing features to gain unauthorized access.
Is there a workaround for CVE-2016-0850?
Currently, there is no specific workaround for CVE-2016-0850 other than updating to a secure version of Android.