CVEvulnerability
CVE-2016-0812
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2016-02-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.1 MEDIUM — CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.6 MEDIUM — AV:L/AC:L/Au:N/C:N/I:C/A:C
- Weaknesses
- CWE-264
Description
The interceptKeyBeforeDispatching function in policy/src/com/android/internal/policy/impl/PhoneWindowManager.java in Setup Wizard in Android 5.1.x before 5.1.1 LMY49G and 6.0 before 2016-02-01 does not properly check for setup completion, which allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 25229538.
Affected configurations
• google android 5.1
• google android 5.1.0
• google android 5.1.1
• google android 6.0
• google android 6.0.1
Related
Weakness · not in database (1)
References
- http://source.android.com/security/bulletin/2016-02-01.html Vendor Advisory
- https://android.googlesource.com/platform%2Fframeworks%2Fbase/+/84669ca8de55d38073a0dcb01074233b0a417541 android.googlesource.com
- http://source.android.com/security/bulletin/2016-02-01.html Vendor Advisory
- https://android.googlesource.com/platform%2Fframeworks%2Fbase/+/84669ca8de55d38073a0dcb01074233b0a417541 android.googlesource.com