CVE-2016-3744

High

Published: 11/07/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Buffer overflow in the create_pbuf function in the Bluetooth module in Android before version 4.4.4, 5.0.2, 5.1.1, and 6.x before July 1, 2016, allows remote attackers to gain privileges via a crafted pairing operation.

Risk Assessment

Attackers may exploit this vulnerability to gain unauthorized access to the system, potentially leading to serious security breaches.

Recommendation

It is recommended to update the Android system to the latest version to mitigate this vulnerability and to monitor any suspicious pairing operations.

Other vulnerabilities in Bluetooth module in Android

CVE-2016-2439High
Buffer overflow in the Bluetooth module in Android before version 4.4.4, 5.0.2, 5.1.1, and 6.x before May 1, 2016 allows remote attackers to execute arbitrary code via a long PIN value.

Original NVD description (English source)

Buffer overflow in the create_pbuf function in btif/src/btif_hh.c in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows remote attackers to gain privileges via a crafted pairing operation, aka internal bug 27930580.