NVD

Id
22081  
Name
CVE-2016-8438  
Description
Integer overflow leading to a TOCTOU condition in hypervisor PIL. An integer overflow exposes a race condition that may be used to bypass (Peripheral Image Loader) PIL authentication. Product: Android. Versions: Kernel 3.18. Android ID: A-31624565. References: QC-CR#1023638.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2017-01-12  
Modified Date
2017-01-17  
Seq
2016-8438  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
118019 22081 CVE-2016-8438 95227  View
118020 22081 CVE-2016-8438 https://source.android.com/security/bulletin/2017-01-01.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
64660 JVNDB-2016-006857 ハイパーバイザの PIL における整数オーバーフローの脆弱性 ハイパーバイザの PIL (Peripheral Image Loader) には、整数オーバーフロー脆弱性が存在します。 CVE-2016-8438 CVE-2016-8438 22081 10 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006857.html 2016-10-05 2017-01-27 View