CVE-2016-0846

libs/binder/IMemory.cpp in the IMemory Native Interface in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not properly consider the heap size, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26877992.

CVSS v3.0

8.4 HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

1.31% chance of exploitation in the next 30 days, 69th percentile

Published

2016-04-18

Updated

2024-08-05

Proof-of-concept exploits (2)

• b0b0505/CVE-2016-0846-PoC1★ · 2016-04-19
• secmob/CVE-2016-084636★ · 2016-04-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/39686

References

• CVE Record
• NVD entry

Related

• CVE-2015-1528
• CVE-2015-6612
• CVE-2015-6764
• CVE-2016-6754
• CVE-2016-9651
• CVE-2019-10567