Code injection

2016-10-1010:59:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

65.0%

JSON

Off-by-one error in server/wifi/anqp/VenueNameElement.java in Wi-Fi in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 allows remote attackers to cause a denial of service (reboot) via an access point that provides a crafted (1) Venue Group or (2) Venue Type value, aka internal bug 29464811.

CPENameOperatorVersion
androideq6.0.1
androideq6.0
androideq7.0

Name	Operator	Version
android	eq	6.0.1
android	eq	6.0
android	eq	7.0

References

www.securityfocus.com/bid/93295

android.googlesource.com/platform/frameworks/opt/net/wifi/+/35a86eef3c0eef760f7e61c52a343327ba601630

source.android.com/security/bulletin/2016-10-01.html