CVE-2016-2492: High severity Google Android vulnerability
Published Jun 6, 2016
·Updated
The MediaTek power-management driver in Android before 2016-06-01 on Android One devices allows attackers to gain privileges via a crafted application, aka internal bug 28085410.
Affected Software
4 affected components
Google Android=6.0
Google Android=6.0.1
Google Android One
Google Android
Remediation
Patch Available
Event History
Jun 6, 2016
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityAffected Software
Jun 13, 2016
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-2492?
CVE-2016-2492 has moderate severity as it allows privilege escalation through a crafted application.
2
How do I fix CVE-2016-2492?
To fix CVE-2016-2492, update your Android device to the security patch released on or after 2016-06-01.
3
Which devices are affected by CVE-2016-2492?
CVE-2016-2492 affects Android One devices running versions 6.0 and 6.0.1.
4
What type of vulnerability is CVE-2016-2492?
CVE-2016-2492 is a privilege escalation vulnerability in the MediaTek power-management driver.
5
Can an attacker exploit CVE-2016-2492 remotely?
CVE-2016-2492 typically requires the attacker to have local access or to convince a user to install a malicious application.