CVE-2016-2456: High severity Google Android One vulnerability
Published May 2, 2016
·Updated
The MediaTek Wi-Fi driver in Android before 2016-05-01 on Android One devices allows attackers to gain privileges via a crafted application, aka internal bug 27275187.
Affected Software
3 affected components
Google Android One
Google Android<=6.0.1
Google Android
Remediation
Patch Available
Event History
May 2, 2016
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityAffected Software
May 9, 2016
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-2456?
CVE-2016-2456 is classified as a critical vulnerability that allows attackers to gain elevated privileges on affected Android devices.
2
How do I fix CVE-2016-2456?
To fix CVE-2016-2456, update your Android device to a version released after May 1, 2016.
3
Which devices are affected by CVE-2016-2456?
CVE-2016-2456 affects Android devices that are running versions prior to 6.0.1 that utilize the MediaTek Wi-Fi driver.
4
Can CVE-2016-2456 be exploited remotely?
Yes, CVE-2016-2456 can be exploited through a crafted application, potentially allowing remote privilege escalation.
5
What types of attacks can be executed using CVE-2016-2456?
Attackers can execute arbitrary code with elevated privileges on vulnerable Android devices using CVE-2016-2456.