CVE-2016-0812

The interceptKeyBeforeDispatching function in policy/src/com/android/internal/policy/impl/PhoneWindowManager.java in Setup Wizard in Android 5.1.x before 5.1.1…

published February 7, 2016

CVSS
—
EPSS
0%
Percentile
7.2
In the wild
Unconfirmed
What it is

The interceptKeyBeforeDispatching function in policy/src/com/android/internal/policy/impl/PhoneWindowManager.java in Setup Wizard in Android 5.1.x before 5.1.1 LMY49G and 6.0 before 2016-02-01 does not properly check for setup completion, which allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 25229538.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00180 · 7.2th percentile
Published
2016-02-07T01:00Z
EPSS history
Timeline
  • 07 FEB 01:00Z
    The interceptKeyBeforeDispatching function in policy/src/com/android/internal/policy/impl/PhoneWindowManager.java in Setup Wizard in Android 5.1.x before 5.1.1…
    cvelistv5