Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Shinjo Park

Researcher fromSecurity in Telecommunications
#36771of 56,330
7.5Total CVSS
Vulnerabilities · 1
PT-2016-2556
7.5
2016-08-05
Google · Android · CVE-2016-3831
**Name of the Vulnerable Software and Affected Versions** Android versions 4.x through 4.4.3 Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-08-01 **Description** The issue allows remote attackers to cause a denial of service, resulting in a device crash, by exploiting the telephony component's mishandling of a NITZ time value of 2038-01-19 or later. This is related to a "Year 2038 problem" and is caused by insufficient input validation. **Recommendations** For Android versions 4.x through 4.4.3, update to version 4.4.4 or later. For Android versions 5.0.x through 5.0.1, update to version 5.0.2 or later. For Android versions 5.1.x through 5.1.0, update to version 5.1.1 or later. For Android versions 6.x before 2016-08-01, ensure your device is updated to a version released on or after 2016-08-01.