p PatchFirst

CVE-2016-0807

CVE-2016-0807

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The get_build_id function in elf_utils.cpp in Debuggerd in Android 6.x before 2016-02-01 allows attackers to gain privileges via a crafted application that mishandles a Desc Size element in an ELF Note, aka internal bug 25187394.

CVSS 8.4 · High · EPSS 0.2% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • android-platform-system-core Debian:11

    Affected ranges
    • ECOSYSTEM: < 1:7.0.0+r1-1

    Update to 1:7.0.0+r1-1

  • android Ubuntu:16.04:LTS

    Versions
    • 20150818-1500-0ubuntu2
    • 20150818-1500-0ubuntu3
    • 20160307-0742-0ubuntu3
    • 20160330-0939-0ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →