Design/Logic Flaw

2016-09-1121:59:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

39.6%

JSON

server/wm/WindowManagerService.java in Android 6.x before 2016-09-01 does not enforce the DISALLOW_SAFE_BOOT setting, which allows physically proximate attackers to bypass intended access restrictions and boot to safe mode via unspecified vectors, aka internal bug 26251884.

CPENameOperatorVersion
androideq6.0.1
androideq6.0

CPE	Name	Operator	Version
	android	eq	6.0.1
	android	eq	6.0

References

www.securityfocus.com/bid/92818

www.securitytracker.com/id/1036763

android.googlesource.com/platform/frameworks/base/+/69729fa8b13cadbf3173fe1f389fe4f3b7bd0f9c

source.android.com/security/bulletin/2016-09-01.html