PT-2016-5736

CVE-2016-3908

Published

2016-10-10

Updated

2016-11-28

CVSS 3.1

5.5

Medium

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Android versions 6.x through 7.0 before 2016-10-01

Description The issue allows attackers to remove a device's PIN or password, and consequently gain privileges, via a crafted application.

Recommendations For Android versions 6.x through 7.0, update to a version released after 2016-10-01 to resolve the issue.

Exploitability

Fix

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾