CVE-2016-3838 on Ubuntu 16.04 LTS (xenial) - medium.
Description:
Android 6.x before 2016-08-01 allows attackers to cause a denial of service (loss of locked-screen 911 functionality) via a crafted application that uses the app-pinning feature, aka internal bug 28761672.