Android 2016-05 Security Bulletin: Mediaserver RCE and Qualcomm TrustZone/WiFi LPE Vulnerabilities

Vulnerability Key Information Announcement Details - This page is the Android Security Bulletin for May 2016. - It outlines multiple security vulnerabilities and updates, and encourages all users to upgrade to the latest version of Android. Android and Google Services Mitigations - Reduces exploitability through Google’s security platform and services (e.g., SafetyNet). - Android and SafetyNet monitor for malicious behavior during app installation. Acknowledgments - Lists contributions from security researchers across various teams and individuals. Vulnerability Details - Remote Code Execution Vulnerability in Mediaserver - CVE-2016-2428 - Severity: Critical. - Updated Nexus Devices: All Nexus. - Updated AOSP Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1. - Reported Date: January 22, 2016. - Privilege Escalation Vulnerability in Debugger - CVE-2016-2430 - Severity: Critical. - Updated Nexus Devices: All Nexus. - Updated AOSP Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1. - Privilege Escalation Vulnerability in Qualcomm TrustZone Component - CVE-2016-2431 - Severity: Critical. - Updated Nexus Devices: Nexus 5, Nexus 6, Nexus 7 (2013). - Updated AOSP Versions: No AOSP patch. - Reported Date: October 15, 2015. - Privilege Escalation Vulnerabilities in Qualcomm Wi-Fi Driver - Includes multiple CVEs: - CVE-2015-0569, CVE-2015-0570, CVE-2015-0571, etc. - Severity: Critical. - Updated Nexus Devices: Nexus 5X, Nexus 6P, Nexus 5, Nexus 7 (2013). - Updated AOSP Versions: No AOSP patch. - Reported Dates: From January to March 2016. FAQs - How to determine if a device has been updated to address these issues. - How to identify which Nexus devices are affected by each issue. - Why CVE-2015-1805 is included in this bulletin. Summary: The screenshot provides detailed information about multiple critical security vulnerabilities on the Android platform in May 2016, including mitigation measures, affected devices, severity levels, and reporting details.

Goal Reached Thanks to every supporter — we hit 100%!

Android 2016-05 Security Bulletin: Mediaserver RCE and Qualcomm TrustZone/WiFi LPE Vulnerabilities