CVE-2016-3840 in Android

सारांश

द्वारा VulDB • 16/07/2026

Conscrypt in Android 4.x versions prior to 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-05 does not properly identify session reuse, allows remote attackers to execute arbitrary code via unspecified vectors, aka internal bug 28751153.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• आरक्षित करना: 30/03/2016
• प्रकटीकरण: 05/08/2016
• संयम: स्वीकृत
• प्रविष्टि: VDB-90606
• CPE: तैयार
• CWE: CWE-264 (पुष्टि की गई)
• CVSS: 9.8 (NVD)
• EPSS: 0.02136
• KEV: नहीं
• गतिविधियाँ: बहुत कम
• क्षेत्र: Lawfirm, Police, ...

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-3840
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-3840
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-3840/