CVE-2016-3748

High

Published: 11/07/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The sockets subsystem in Android 6.x before 2016-07-01 allows attackers to bypass intended system-call restrictions via a crafted application that makes an ioctl call.

Risk Assessment

Attackers may exploit this vulnerability to gain unauthorized access to the system, potentially leading to serious security breaches.

Recommendation

It is recommended to update the Android system to a version after 2016-07-01 to mitigate this vulnerability.

Other vulnerabilities in Podsystem gniazd w Androidzie

CVE-2016-3762High
The sockets subsystem in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before July 1, 2016, allows attackers to gain privileges via a crafted application that uses the AF_MSM_IPC socket class or another socket class that is unrecognized by SELinux.

Original NVD description (English source)

The sockets subsystem in Android 6.x before 2016-07-01 allows attackers to bypass intended system-call restrictions via a crafted application that makes an ioctl call, aka internal bug 28171804.