CVE-2016-3762
HighSummary
The sockets subsystem in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before July 1, 2016, allows attackers to gain privileges via a crafted application that uses the AF_MSM_IPC socket class or another socket class that is unrecognized by SELinux.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized access to the system and privilege escalation, posing a serious threat to user data security.
Recommendation
It is recommended to update the Android system to the latest version to mitigate this vulnerability and to monitor applications using sockets for potential threats.
Other vulnerabilities in Podsystem gniazd w Androidzie
Original NVD description (English source)
The sockets subsystem in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allows attackers to gain privileges via a crafted application that uses (1) the AF_MSM_IPC socket class or (2) another socket class that is unrecognized by SELinux, aka internal bug 28612709.