Vulnerabilities > CVE-2016-0849 - Numeric Errors vulnerability in Google Android

047910
CVSS 8.4 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
low complexity
google
CWE-189
NVD
Published: 2016-04-18
Updated: 2024-11-21

Summary

Multiple integer overflows in minzip/SysUtil.c in the Recovery Procedure in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allow attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26960931.

Vulnerable Configurations

Part Description Count
OS
Google
6

Common Weakness Enumeration (CWE)

References