CVE-2016-8398

Critical

Published: 12/01/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Unauthenticated messages are processed by the User Equipment (UE). Certain NAS messages are processed when no EPS security context exists in the UE.

Risk Assessment

Processing unauthenticated messages may lead to security breaches of the device and potential access to sensitive data.

Recommendation

It is recommended to update the Android system to the latest version to minimize the risk associated with this vulnerability.

Original NVD description (English source)

Unauthenticated messages processed by the UE. Certain NAS messages are processed when no EPS security context exists in the UE. Product: Android. Versions: Kernel 3.18. Android ID: A-31548486. References: QC-CR#877705.