Vulnerability Name: | CVE-2016-3894 (CCN-116777) | ||||||||||||||||
Assigned: | 2016-09-06 | ||||||||||||||||
Published: | 2016-09-06 | ||||||||||||||||
Updated: | 2017-08-13 | ||||||||||||||||
Summary: | The Qualcomm DMA component in Android before 2016-09-05 on Nexus 6 devices allows attackers to obtain sensitive information via a crafted application, aka Android internal bug 29618014 and Qualcomm internal bug CR1042033. | ||||||||||||||||
CVSS v3 Severity: | 5.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) 4.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C)
4.8 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C)
| ||||||||||||||||
CVSS v2 Severity: | 4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N)
| ||||||||||||||||
Vulnerability Type: | CWE-200 | ||||||||||||||||
Vulnerability Consequences: | Obtain Information | ||||||||||||||||
References: | Source: CCN Type: Google Web site Android Source: MITRE Type: CNA CVE-2016-3894 Source: CCN Type: Android Open Source Project Android Security Bulletin—September 2016 Source: CONFIRM Type: Patch, Vendor Advisory http://source.android.com/security/bulletin/2016-09-01.html Source: BID Type: UNKNOWN 92880 Source: CCN Type: BID-92880 Google Nexus CVE-2016-3894 Information Disclosure Vulnerability Source: SECTRACK Type: UNKNOWN 1036763 Source: XF Type: UNKNOWN android-cve20163894-info-disc(116777) | ||||||||||||||||
Vulnerable Configuration: | Configuration 1: Configuration CCN 1: Denotes that component is vulnerable | ||||||||||||||||
Oval Definitions | |||||||||||||||||
| |||||||||||||||||
BACK |