CVE-2016-3751 - Vulnerability Details

Vendors	Products
Google	Android
Libpng	Libpng

Link	Providers
http://source.android.com/security/bulletin/2016-07-01.html
http://www.openwall.com/lists/oss-security/2016/07/09/4
https://android.googlesource.com/platform/external/libpng/+/9d4853418ab2f754c2b63e091c29c5529b8b86ca
https://security.netapp.com/advisory/ntap-20240719-0004/

Show plain JSON

{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2016-3751", "assignerOrgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", "assignerShortName": "google_android", "dateUpdated": "2024-08-06T00:03:34.421Z", "dateReserved": "2016-03-30T00:00:00", "datePublished": "2016-07-11T01:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "baff130e-b8d5-4e15-b3d3-c3cf5d5545c6", "shortName": "google_android", "dateUpdated": "2024-07-19T13:06:15.775280"}, "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in libpng before 1.6.20, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01, allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 23265085."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://android.googlesource.com/platform/external/libpng/+/9d4853418ab2f754c2b63e091c29c5529b8b86ca"}, {"name": "[oss-security] 20160709 Re: On anonymous CVE assignments", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2016/07/09/4"}, {"url": "http://source.android.com/security/bulletin/2016-07-01.html"}, {"url": "https://security.netapp.com/advisory/ntap-20240719-0004/"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}], "datePublic": "2016-07-05T00:00:00"}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T00:03:34.421Z"}, "title": "CVE Program Container", "references": [{"url": "https://android.googlesource.com/platform/external/libpng/+/9d4853418ab2f754c2b63e091c29c5529b8b86ca", "tags": ["x_transferred"]}, {"name": "[oss-security] 20160709 Re: On anonymous CVE assignments", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2016/07/09/4"}, {"url": "http://source.android.com/security/bulletin/2016-07-01.html", "tags": ["x_transferred"]}, {"url": "https://security.netapp.com/advisory/ntap-20240719-0004/", "tags": ["x_transferred"]}]}]}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

cveMetadata : { »

state : PUBLISHED (string)

cveId : CVE-2016-3751 (string)

assignerOrgId : baff130e-b8d5-4e15-b3d3-c3cf5d5545c6 (string)

assignerShortName : google_android (string)

dateUpdated : 2024-08-06T00:03:34.421Z (string)

dateReserved : 2016-03-30T00:00:00 (string)

datePublished : 2016-07-11T01:00:00 (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : baff130e-b8d5-4e15-b3d3-c3cf5d5545c6 (string)

shortName : google_android (string)

dateUpdated : 2024-07-19T13:06:15.775280 (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : Unspecified vulnerability in libpng before 1.6.20, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01, allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 23265085. (string)

}

]

affected : [ »

0 : { »

vendor : n/a (string)

product : n/a (string)

versions : [ »

0 : { »

version : n/a (string)

status : affected (string)

}

]

}

]

references : [ »

0 : { »

url : https://android.googlesource.com/platform/external/libpng/+/9d4853418ab2f754c2b63e091c29c5529b8b86ca (string)

}

1 : { »

name : [oss-security] 20160709 Re: On anonymous CVE assignments (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2016/07/09/4 (string)

}

2 : { »

url : http://source.android.com/security/bulletin/2016-07-01.html (string)

}

3 : { »

url : https://security.netapp.com/advisory/ntap-20240719-0004/ (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : text (string)

lang : en (string)

description : n/a (string)

}

]

}

]

datePublic : 2016-07-05T00:00:00 (string)

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-06T00:03:34.421Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://android.googlesource.com/platform/external/libpng/+/9d4853418ab2f754c2b63e091c29c5529b8b86ca (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

name : [oss-security] 20160709 Re: On anonymous CVE assignments (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2016/07/09/4 (string)

}

2 : { »

url : http://source.android.com/security/bulletin/2016-07-01.html (string)

tags : [ »

0 : x_transferred (string)

]

}

3 : { »

url : https://security.netapp.com/advisory/ntap-20240719-0004/ (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

]

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*", "matchCriteriaId": "0F63D199-D477-4807-8A4E-A30C55D1FC48", "versionEndIncluding": "1.6.19", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*", "matchCriteriaId": "A39C31E3-75C0-4E92-A6B5-7D67B22E3449", "vulnerable": true}, {"criteria": "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "BB318EA4-2908-4B91-8DBB-20008FDF528A", "vulnerable": true}, {"criteria": "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "1F4E46A9-B652-47CE-92E8-01021E57724B", "vulnerable": true}, {"criteria": "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93", "vulnerable": true}, {"criteria": "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "36DD8E3F-6308-4680-B932-4CBD8E58A7FB", "vulnerable": true}, {"criteria": "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*", "matchCriteriaId": "1DA9F0F7-D592-481E-884C-B1A94E702825", "vulnerable": true}, {"criteria": "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B", "vulnerable": true}, {"criteria": "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*", "matchCriteriaId": "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1", "vulnerable": true}, {"criteria": "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "A47AB858-36DE-4330-8CAC-1B46C5C8DA80", "vulnerable": true}, {"criteria": "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "49413FF7-7910-4F74-B106-C3170612CB2A", "vulnerable": true}, {"criteria": "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*", "matchCriteriaId": "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B", "vulnerable": true}, {"criteria": "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "A8882E50-7C49-4A99-91F2-DF979CF8BB2F", "vulnerable": true}, {"criteria": "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*", "matchCriteriaId": "98C32982-095C-4628-9958-118A3D3A9CAA", "vulnerable": true}, {"criteria": "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1", "vulnerable": true}, {"criteria": "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D", "vulnerable": true}, {"criteria": "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*", "matchCriteriaId": "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42", "vulnerable": true}, {"criteria": "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*", "matchCriteriaId": "7C4E6353-B77A-464F-B7DE-932704003B33", "vulnerable": true}, {"criteria": "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "77125688-2CCA-4990-ABB2-551D47CB0CDD", "vulnerable": true}, {"criteria": "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*", "matchCriteriaId": "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3", "vulnerable": true}, {"criteria": "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "B846C63A-7261-481E-B4A4-0D8C79E0D8A7", "vulnerable": true}, {"criteria": "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "E70C6D8D-C9C3-4D92-8DFC-71F59E068295", "vulnerable": true}, {"criteria": "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "691FA41B-C2CE-413F-ABB1-0B22CB322807", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in libpng before 1.6.20, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01, allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 23265085."}, {"lang": "es", "value": "Vulnerabilidad no especificada en libpng en versiones anteriores a 1.6.20, como es usado en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 2016-07-01, permite a atacantes obtener privilegios a trav\u00e9s de una aplicaci\u00f3n manipulada, seg\u00fan lo demostrado por la obtenci\u00f3n de acceso Signature o SignatureOrSystem, tambi\u00e9n conocido como error interno 23265085."}], "id": "CVE-2016-3751", "lastModified": "2025-04-12T10:46:40.837", "metrics": {"cvssMetricV2": [{"acInsufInfo": true, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2016-07-11T01:59:51.870", "references": [{"source": "security@android.com", "tags": ["Vendor Advisory"], "url": "http://source.android.com/security/bulletin/2016-07-01.html"}, {"source": "security@android.com", "url": "http://www.openwall.com/lists/oss-security/2016/07/09/4"}, {"source": "security@android.com", "url": "https://android.googlesource.com/platform/external/libpng/+/9d4853418ab2f754c2b63e091c29c5529b8b86ca"}, {"source": "security@android.com", "url": "https://security.netapp.com/advisory/ntap-20240719-0004/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://source.android.com/security/bulletin/2016-07-01.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2016/07/09/4"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://android.googlesource.com/platform/external/libpng/+/9d4853418ab2f754c2b63e091c29c5529b8b86ca"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://security.netapp.com/advisory/ntap-20240719-0004/"}], "sourceIdentifier": "security@android.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 0F63D199-D477-4807-8A4E-A30C55D1FC48 (string)

versionEndIncluding : 1.6.19 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:* (string)

matchCriteriaId : A39C31E3-75C0-4E92-A6B5-7D67B22E3449 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:* (string)

matchCriteriaId : BB318EA4-2908-4B91-8DBB-20008FDF528A (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 1F4E46A9-B652-47CE-92E8-01021E57724B (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:* (string)

matchCriteriaId : AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 36DD8E3F-6308-4680-B932-4CBD8E58A7FB (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 1DA9F0F7-D592-481E-884C-B1A94E702825 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 6CD857E7-B878-49F9-BDDA-93DDEBB0B42B (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:* (string)

matchCriteriaId : FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:* (string)

matchCriteriaId : A47AB858-36DE-4330-8CAC-1B46C5C8DA80 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:* (string)

matchCriteriaId : 49413FF7-7910-4F74-B106-C3170612CB2A (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:* (string)

matchCriteriaId : A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:* (string)

matchCriteriaId : A8882E50-7C49-4A99-91F2-DF979CF8BB2F (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:* (string)

matchCriteriaId : 98C32982-095C-4628-9958-118A3D3A9CAA (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:* (string)

matchCriteriaId : EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:* (string)

matchCriteriaId : FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42 (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 7C4E6353-B77A-464F-B7DE-932704003B33 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 77125688-2CCA-4990-ABB2-551D47CB0CDD (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:* (string)

matchCriteriaId : E7A8EC00-266C-409B-AD43-18E8DFCD6FE3 (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:* (string)

matchCriteriaId : B846C63A-7261-481E-B4A4-0D8C79E0D8A7 (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:* (string)

matchCriteriaId : E70C6D8D-C9C3-4D92-8DFC-71F59E068295 (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:* (string)

matchCriteriaId : 691FA41B-C2CE-413F-ABB1-0B22CB322807 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Unspecified vulnerability in libpng before 1.6.20, as used in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01, allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 23265085. (string)

}

1 : { »

lang : es (string)

value : Vulnerabilidad no especificada en libpng en versiones anteriores a 1.6.20, como es usado en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 2016-07-01, permite a atacantes obtener privilegios a través de una aplicación manipulada, según lo demostrado por la obtención de acceso Signature o SignatureOrSystem, también conocido como error interno 23265085. (string)

}

]

id : CVE-2016-3751 (string)

lastModified : 2025-04-12T10:46:40.837 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : true (boolean)

baseSeverity : HIGH (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : PARTIAL (string)

baseScore : 7.5 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : PARTIAL (string)

vectorString : AV:N/AC:L/Au:N/C:P/I:P/A:P (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 6.4 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 7.8 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (string)

version : 3.0 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2016-07-11T01:59:51.870 (string)

references : [ »

0 : { »

source : security@android.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://source.android.com/security/bulletin/2016-07-01.html (string)

}

1 : { »

source : security@android.com (string)

url : http://www.openwall.com/lists/oss-security/2016/07/09/4 (string)

}

2 : { »

source : security@android.com (string)

url : https://android.googlesource.com/platform/external/libpng/+/9d4853418ab2f754c2b63e091c29c5529b8b86ca (string)

}

3 : { »

source : security@android.com (string)

url : https://security.netapp.com/advisory/ntap-20240719-0004/ (string)

}

4 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://source.android.com/security/bulletin/2016-07-01.html (string)

}

5 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : http://www.openwall.com/lists/oss-security/2016/07/09/4 (string)

}

6 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : https://android.googlesource.com/platform/external/libpng/+/9d4853418ab2f754c2b63e091c29c5529b8b86ca (string)

}

7 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : https://security.netapp.com/advisory/ntap-20240719-0004/ (string)

}

]

sourceIdentifier : security@android.com (string)

vulnStatus : Deferred (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : NVD-CWE-noinfo (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object