CVE-2016-2439

High

Published: 09/05/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Buffer overflow in the Bluetooth module in Android before version 4.4.4, 5.0.2, 5.1.1, and 6.x before May 1, 2016 allows remote attackers to execute arbitrary code via a long PIN value.

Risk Assessment

An attacker can remotely take control of the device, posing a serious threat to user data security.

Recommendation

It is recommended to update the Android system to the latest version to mitigate this vulnerability.

Other vulnerabilities in Bluetooth module in Android

CVE-2016-3744High
Buffer overflow in the create_pbuf function in the Bluetooth module in Android before version 4.4.4, 5.0.2, 5.1.1, and 6.x before July 1, 2016, allows remote attackers to gain privileges via a crafted pairing operation.

Original NVD description (English source)

Buffer overflow in btif/src/btif_dm.c in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-05-01 allows remote attackers to execute arbitrary code via a long PIN value, aka internal bug 27411268.