CVE-2016-1503: Buffer Overflow
dhcpcd before 6.10.0, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 and other products, mismanages option lengths, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a malformed DHCP response, aka internal bug 26461634.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1503?
CVE-2016-1503 has a CVSS score indicating high severity due to the potential for remote code execution.
How do I fix CVE-2016-1503?
To address CVE-2016-1503, update dhcpcd to version 6.10.0 or later, or apply the relevant security patches for your affected Android version.
Which versions of Android are affected by CVE-2016-1503?
CVE-2016-1503 affects Android versions 4.0 through 6.0.1 prior to the specified security patches.
What are the potential impacts of CVE-2016-1503?
Exploitation of CVE-2016-1503 can lead to arbitrary code execution or a denial of service condition on affected devices.
Is CVE-2016-1503 specific to certain applications?
CVE-2016-1503 specifically affects devices using the dhcpcd network configuration tool within the mentioned Android versions.