CVE-2016-8398 — INC Android vulnerability

CWE-2543 documents3 sources
Severity
9.8CRITICALNVD
EPSS
0.6%
top 29.65%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Google INC AndroidLinux KernelGoogle Android
Timeline
PublishedJan 12
Latest updateMay 17

Description

Unauthenticated messages processed by the UE. Certain NAS messages are processed when no EPS security context exists in the UE. Product: Android. Versions: Kernel 3.18. Android ID: A-31548486. References: QC-CR#877705.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages3 packages

▶CVEListV5google_inc/androidKernel-3.10

🔴Vulnerability Details

1
GHSA
GHSA-wh6j-frq8-76pq: Unauthenticated messages processed by the UE↗2022-05-17
▶

📋Vendor Advisories

1
Android
CVE-2016-8398: Android Security Bulletin 2017-01-01 CVE: CVE-2016-8398 Severity: HIGH References: A-31548486**↗2017-01-01
▶