CVE-2016-0812
published 2016-02-07CVE-2016-0812: The interceptKeyBeforeDispatching function in policy/src/com/android/internal/policy/impl/PhoneWindowManager.java in Setup Wizard in Android 5.1.x before 5.1.1…
PriorityP421medium6.1CVSS 3.0
AVPACLPRNUINSUCNIHAH
EPSS
0.18%
7.8th percentile
The interceptKeyBeforeDispatching function in policy/src/com/android/internal/policy/impl/PhoneWindowManager.java in Setup Wizard in Android 5.1.x before 5.1.1 LMY49G and 6.0 before 2016-02-01 does not properly check for setup completion, which allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 25229538.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — |
CVSS provenance
nvdv3.06.1MEDIUMCVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
nvdv2.06.6MEDIUMAV:L/AC:L/Au:N/C:N/I:C/A:C
osv6.1MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Android
CVE-2016-0812: Android Security Bulletin 2016-02-01
CVE: CVE-2016-0812
Severity: MEDIUM
Affected AOSP versions: 5
vendor_android·2016-02-01·CVSS 6.1
CVE-2016-0812 [MEDIUM] CVE-2016-0812: Android Security Bulletin 2016-02-01
CVE: CVE-2016-0812
Severity: MEDIUM
Affected AOSP versions: 5
Android Security Bulletin 2016-02-01
CVE: CVE-2016-0812
Severity: MEDIUM
Affected AOSP versions: 5.1.1, 6.0
GHSA
GHSA-9jw7-cwvh-qp9c: The interceptKeyBeforeDispatching function in policy/src/com/android/internal/policy/impl/PhoneWindowManager
ghsa_unreviewed·2022-05-17
CVE-2016-0812 [MEDIUM] GHSA-9jw7-cwvh-qp9c: The interceptKeyBeforeDispatching function in policy/src/com/android/internal/policy/impl/PhoneWindowManager
The interceptKeyBeforeDispatching function in policy/src/com/android/internal/policy/impl/PhoneWindowManager.java in Setup Wizard in Android 5.1.x before 5.1.1 LMY49G and 6.0 before 2016-02-01 does not properly check for setup completion, which allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 25229538.
OSV
CVE-2016-0812: The interceptKeyBeforeDispatching function in policy/src/com/android/internal/policy/impl/PhoneWindowManager
osv·2016-02-07·CVSS 6.1
CVE-2016-0812 [MEDIUM] CVE-2016-0812: The interceptKeyBeforeDispatching function in policy/src/com/android/internal/policy/impl/PhoneWindowManager
The interceptKeyBeforeDispatching function in policy/src/com/android/internal/policy/impl/PhoneWindowManager.java in Setup Wizard in Android 5.1.x before 5.1.1 LMY49G and 6.0 before 2016-02-01 does not properly check for setup completion, which allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 25229538.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://source.android.com/security/bulletin/2016-02-01.htmlhttps://android.googlesource.com/platform%2Fframeworks%2Fbase/+/84669ca8de55d38073a0dcb01074233b0a417541http://source.android.com/security/bulletin/2016-02-01.htmlhttps://android.googlesource.com/platform%2Fframeworks%2Fbase/+/84669ca8de55d38073a0dcb01074233b0a417541
2016-02-07
Published