CVE-2016-3875

server/wm/WindowManagerService.java in Android 6.x before 2016-09-01 does not enforce the DISALLOWSAFEBOOT setting, which allows physically proximate attackers to bypass intended access restrictions and boot to safe mode via unspecified vectors, aka internal bug 26251884...

PT-2016-5707

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-09-01 patch Description The issue allows physically proximate attackers to bypass intended access restrictions and boot to safe mode via unspecified vectors because the DISALLOW SAFE BOOT setting is not enforced...