vulnwire
9.8crit

CVE-2016-2496

The Framework UI permission-dialog implementation in Android 6.x before 2016-06-01 allows attackers to conduct tapjacking attacks and acces…

Published 10 y ago · modified 4 mo ago · JSON

CVSS
9.8
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
0.9%
percentile 60%
Public exploits
0
none known

The Framework UI permission-dialog implementation in Android 6.x before 2016-06-01 allows attackers to conduct tapjacking attacks and access arbitrary private-storage files by creating a partially overlapping window, aka internal bug 26677796.

Exploit prediction (EPSS)

0.91% probability of exploitation in the next 30 days, higher than 60% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.19.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD2.010.0AV:N/AC:L/Au:N/C:C/I:C/A:C

Classification

Weakness
  • CWE-1021 Improper Restriction of Rendered UI Layers or Frames

References

  • android.googlesource.com /platform/frameworks/native/+/03a53d1c7765eeb3af0bc34c3dff02ada1953fbf · x_refsource_CONFIRM, x_transferred
  • android.googlesource.com /platform/packages/apps/PackageInstaller/+/2068c7997265011ddc5e4dfa3418407881f7f81e · x_refsource_CONFIRM, x_transferred
  • source.android.com /security/bulletin/2016-06-01.html · x_refsource_CONFIRM, x_transferred
  • android.googlesource.com /platform/frameworks/base/+/613f63b938145bb86cd64fe0752eaf5e99b5f628 · x_refsource_CONFIRM, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.