CVE-2016-0809

Use-after-free vulnerability in the wifi_cleanup function in bcmdhd/wifi_hal/wifi_hal.cpp in Wi-Fi in Android 6.x before 2016-02-01 allows attackers to gain privileges by leveraging access to the local physical environment during execution of a crafted application, aka internal bug 25753768.

Score

CVSS 3.0 8.8 High

Status

Modified - security@android.com

Published

2016-02-07

Last modified

2024-08-05

Weaknesses

CWE-264

Affected products

• Android (Google)

References

• http://source.android.com/security/bulletin/2016-02-01.html
• https://android.googlesource.com/platform/hardware/broadcom/wlan/+/2c5a4fac8bc8198f6a2635ede776f8de40a0c3e1