Skip to content
OpenAdvisories
Unscored CVE-2016-3758 EUVD-2016-4771GHSA-99qx-727v-7x9w

Multiple buffer overflows in libdex/OptInvocation.cpp in DexClassLoader in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1…

Published Jul 11, 2016 · Updated Aug 6, 2024 · Assigned by google_android

Package: android Package: android-platform-dalvik Ecosystem: Debian Ecosystem: Ubuntu

Description

Multiple buffer overflows in libdex/OptInvocation.cpp in DexClassLoader in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attackers to gain privileges via a crafted application that provides a long filename, aka internal bug 27840771.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 11 android-platform-dalvik 6.0.1+r55-1 —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS android No fix yet —

Advisories 1

References