CVE-2016-3922

libril/RilSapSocket.cpp in Telephony in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 relies on variable-length arrays, which allows attackers to gain privileges via a crafted application, aka internal bug 30202619...

CVE-2016-3922

CVE-2016-3922 affects Android Telephony: libril/RilSapSocket.cpp in the Telephony stack on Android 6.x (before 2016-10-01) and 7.0 (before 2016-10-01) relies on variable-length arrays, enabling privilege elevation via a crafted app. Root cause: use of variable-length arrays in the vulnerable code...