Unscored CVE-2016-0807 EUVD-2016-0818GHSA-c6wm-7cfc-hf64

The get_build_id function in elf_utils.cpp in Debuggerd in Android 6.x before 2016-02-01 allows attackers to gain privileges via a crafted …

Published Feb 7, 2016 · Updated Aug 5, 2024 · Assigned by google_android

Package: android Package: android-platform-system-core Ecosystem: Debian Ecosystem: Ubuntu

Description

The get_build_id function in elf_utils.cpp in Debuggerd in Android 6.x before 2016-02-01 allows attackers to gain privileges via a crafted application that mishandles a Desc Size element in an ELF Note, aka internal bug 25187394.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 11	android-platform-system-core	1:7.0.0+r1-1	—

Ubuntu