CVEvulnerability
CVE-2016-0813
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2016-02-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.1 MEDIUM — CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.6 MEDIUM — AV:L/AC:L/Au:N/C:N/I:C/A:C
- Weaknesses
- CWE-264
Description
packages/SystemUI/src/com/android/systemui/recents/AlternateRecentsComponent.java in Setup Wizard in Android 5.1.x before 5.1.1 LMY49G and 6.x before 2016-02-01 does not properly check for device provisioning, which allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 25476219.
Affected configurations
• google android 5.1
• google android 5.1.0
• google android 5.1.1
• google android 6.0
• google android 6.0.1
Related
Weakness · not in database (1)
References
- http://source.android.com/security/bulletin/2016-02-01.html Vendor Advisory
- https://android.googlesource.com/platform%2Fframeworks%2Fbase/+/16a76dadcc23a13223e9c2216dad1fe5cad7d6e1 android.googlesource.com
- http://source.android.com/security/bulletin/2016-02-01.html Vendor Advisory
- https://android.googlesource.com/platform%2Fframeworks%2Fbase/+/16a76dadcc23a13223e9c2216dad1fe5cad7d6e1 android.googlesource.com