Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2016-3918

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Android是美国谷歌（Google）公司和开放手持设备联盟（简称OHA）共同开发的一套以Linux为基础的开源操作系统。AOSP Mail是其中的一个AOSP（Android开源项目）电子邮件组件。 Android中的AOSP Mail中的email/provider/AttachmentProvider.java文件存在安全漏洞，该漏洞源于程序没有确保值为整数。攻击者可借助提供路径名的应用程序利用该漏洞读取任意附件。以下版本受到影响：Android 4.4.4之前的4.x版本，5.0.2之前的5.0

AI Predicted 6.9 Difficulty: Easy EPSS 0.46% · P38

Possible ATT&CK Techniques 1 AI

T1082 · System Information Discovery
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2016-3918

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
email/provider/AttachmentProvider.java in AOSP Mail in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 does not ensure that certain values are integers, which allows attackers to read arbitrary attachments via a crafted application that provides a pathname value, aka internal bug 30745403.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Android AOSP Mail 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Android是美国谷歌（Google）公司和开放手持设备联盟（简称OHA）共同开发的一套以Linux为基础的开源操作系统。AOSP Mail是其中的一个AOSP（Android开源项目）电子邮件组件。 Android中的AOSP Mail中的email/provider/AttachmentProvider.java文件存在安全漏洞，该漏洞源于程序没有确保值为整数。攻击者可借助提供路径名的应用程序利用该漏洞读取任意附件。以下版本受到影响：Android 4.4.4之前的4.x版本，5.0.2之前的5.0
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2016-3918

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2016-3918

请登录查看更多情报信息。

Vendor Advisories for CVE-2016-3918 (2)

Other References for CVE-2016-3918 (1)

Same Patch Batch · n/a · 2016-10-10 · 108 CVEs total

CVE-2016-3928 Android MediaTek video驱动程序安全漏洞
CVE-2016-5343 QDSP6v2 Voice Service driver for the Linux kernel 拒绝服务漏洞
CVE-2016-3940 Android Synaptics触屏驱动程序安全漏洞
CVE-2016-3939 Android Qualcomm video驱动程序安全漏洞
CVE-2016-3938 Android Qualcomm video驱动程序安全漏洞
CVE-2016-3937 Android MediaTek video驱动程序安全漏洞
CVE-2016-3936 Android MediaTek video驱动程序安全漏洞
CVE-2016-3935 Android Qualcomm密码引擎驱动程序整数溢出漏洞
CVE-2016-3934 Android Qualcomm摄像头驱动程序安全漏洞
CVE-2016-3933 Android Mediaserver 安全漏洞
CVE-2016-3932 Android Mediaserver 安全漏洞
CVE-2016-3931 Android Qualcomm QSEE Communicator驱动程序安全漏洞
CVE-2016-3930 Android NVIDIA MMC测试驱动程序安全漏洞
CVE-2016-3929 Android Qualcomm组件安全漏洞
CVE-2016-3916 Android Camera服务安全漏洞
CVE-2016-3921 Android Framework Listener 安全漏洞
CVE-2016-3920 Android Mediaserver 拒绝服务漏洞
CVE-2016-3917 Android 安全漏洞
CVE-2016-3922 Android Telephony 安全漏洞
CVE-2016-3915 Android Camera服务安全漏洞

Showing top 20 of 108 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2016-3918

No comments yet

Leave a comment