PT-2016-4054
CVE-2015-8890
·
Publicado
2016-07-11
·
Atualizado
2016-11-28
Descrição por
CVSS 2.0
9.3
AltaMétricasAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Android versions prior to 2016-07-05 on Nexus 5 and 7 (2013) devices
Description
The issue concerns a lack of validation for certain GUID Partition Table (GPT) data in the
partition parser.c file within the Qualcomm components of Android. This allows attackers to bypass intended access restrictions by using a crafted MultiMediaCard (MMC).Recommendations
For Android versions prior to 2016-07-05 on Nexus 5 and 7 (2013) devices, update the Android version to a newer one released after 2016-07-05 to resolve the issue.
Explorabilidade
Correção
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾