CVE-2016-10448

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05

Description The issue is related to a simultaneous command post for addSA or updateSA on the same SA, leading to memory corruption. This occurs because the addSA and updateSA APIs access the global variable ipsec sa list[] outside of mutex protection.

Recommendations For Android versions prior to 2018-04-05, update to a version with a security patch level of 2018-04-05 or later to resolve the issue.