security/bulletin/2016-02-01.html

<html devsite>
  <head>
    <title>Nexus   - 2016 2</title>
    <meta name="project_path" value="/_project.yaml" />
    <meta name="book_path" value="/_book.yaml" />
  </head>
  <body>
  <!--
      Copyright 2017 The Android Open Source Project

      Licensed under the Apache License, Version 2.0 (the "License");
      you may not use this file except in compliance with the License.
      You may obtain a copy of the License at

          http://www.apache.org/licenses/LICENSE-2.0

      Unless required by applicable law or agreed to in writing, software
      distributed under the License is distributed on an "AS IS" BASIS,
      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
      See the License for the specific language governing permissions and
      limitations under the License.
  -->


<p><em>2016 2 1  | 2016 3 7 </em></p>

<p>Google Android
  Nexus    .
 Nexus   <a href="https://developers.google.com/android/nexus/images">Google  </a> .

   LMY49G   2016 2 1      Android M  .
        <a href="https://support.google.com/nexus/answer/4457705">Nexus </a> .</p>

<p>     2016 1 4   .  ,
Android  (AOSP)  .</p>

<p>
  , MMS
        .
 Broadcom Wi-Fi
             .</p>

<p>
. SafetyNet  Android    <a href="/security/enhancements/index.html">Android   </a>
  <a href="#mitigations"></a>  .
.</p>

<h2 id="security_vulnerability_summary">  </h2>


<p>    ,     ID(CVE),
   . <a href="/security/overview/updates-resources.html#severity"> </a>

 .</p>
<table>
 <tr>
    <th></th>
    <th>CVE</th>
    <th></th>
 </tr>
 <tr>
    <td>Broadcom Wi-Fi     </td>
    <td>CVE-2016-0801<br>
        CVE-2016-0802</td>
    <td></td>
 </tr>
 <tr>
    <td>     </td>
    <td>CVE-2016-0803<br>
        CVE-2016-0804</td>
    <td></td>
 </tr>
 <tr>
    <td>Qualcomm     </td>
    <td>CVE-2016-0805</td>
    <td></td>
 </tr>
 <tr>
    <td>Qualcomm Wi-Fi    </td>
    <td>CVE-2016-0806</td>
    <td></td>
 </tr>
 <tr>
    <td>Debugger Daemon   </td>
    <td>CVE-2016-0807</td>
    <td></td>
 </tr>
 <tr>
    <td>Minikin  (DoS) </td>
    <td>CVE-2016-0808</td>
    <td></td>
 </tr>
 <tr>
    <td>Wi-Fi   </td>
    <td>CVE-2016-0809</td>
    <td></td>
 </tr>
 <tr>
    <td>    </td>
    <td>CVE-2016-0810</td>
    <td></td>
 </tr>
 <tr>
    <td>libmediaplayerservice   </td>
    <td>CVE-2016-0811</td>
    <td></td>
 </tr>
 <tr>
    <td>    </td>
    <td>CVE-2016-0812<br>
        CVE-2016-0813</td>
    <td></td>
 </tr>
</table>


<h3 id="mitigations"></h3>


<p> SafetyNet  <a href="https://source.android.com/security/enhancements/index.html">Android  </a>        .
   Android
.</p>

<ul>
  <li> Android      Android
  .
Android     .
  <li> Android
     SafetyNet
. Google Play      .
Google Play
         .

 .

  .
  <li>   Google
   .
</li></li></li></ul>

<h3 id="acknowledgements"></h3>


<p>    .</p>

<ul>
  <li> Android  Chrome : CVE-2016-0809, CVE-2016-0810
  <li> Broadgate: CVE-2016-0801, CVE-2015-0802
  <li> <a href="http://www.360safe.com/">Qihoo 360</a> <a href="http://c0reteam.org">C0RE</a> Chiachih Wu(<a href="https://twitter.com/chiachih_wu">@chiachih_wu</a>), Mingjian Zhou(<a href="https://twitter.com/Mingjian_Zhou">@Mingjian_Zhou</a>), Xuxian Jiang
: CVE-2016-0804
  <li> Google Pixel C David Riley: CVE-2016-0812
  <li> Qihoo 360 Lab IceSword
       Gengjia Chen(<a href="https://twitter.com/@chengjia4574">@chengjia4574</a>): CVE-2016-0805
  <li> Tencent KeenLab(<a href="https://twitter.com/keen_lab">@keen_lab</a>)
       Qidan He(<a href="https://twitter.com/@Flanker_hqd">@Flanker_hqd</a>): CVE-2016-0811
  <li> Trend Micro(<a href="http://www.trendmicro.com">www.trendmicro.com</a>)
       Seven Shen(<a href="https://twitter.com/@lingtongshen">@lingtongshen</a>): CVE-2016-0803
  <li> Alibaba Inc Weichao Sun(<a href="https://twitter.com/sunblate">@sunblate</a>): CVE-2016-0808
  <li> Android  Zach Riggle(<a href="https://twitter.com/@ebeip90">@ebeip90</a>): CVE-2016-0807
</li></li></li></li></li></li></li></li></li></li></li></ul>

<h2 id="security_vulnerability_details">  </h2>


<p>   <a href="#security_vulnerability_summary">  </a>
    .    ,    CVE,  , ,
       .
    AOSP   ID .
        AOSP   ID    . </p>

<h3 id="remote_code_execution_vulnerability_in_broadcom_wi-fi_driver">Broadcom Wi-Fi     </h3>


<p>Broadcom Wi-Fi

         .
           .

  .</p>
<table>
 <tr>
    <th>CVE</th>
    <th></th>
    <th></th>
    <th> </th>
    <th> </th>
 </tr>
 <tr>
    <td>CVE-2016-0801</td>
    <td><a href="https://android.googlesource.com/kernel/msm/+/68cdc8df1cb6622980b791ce03e99c255c9888af^!">ANDROID-25662029</a><br>
   <a href="https://android.googlesource.com/kernel/msm/+/68cdc8df1cb6622980b791ce03e99c255c9888af^!">ANDROID-25662233</a></td>
    <td></td>
    <td>4.4.4, 5.0, 5.1.1, 6.0, 6.0.1</td>
    <td>2015 10 25</td>
 </tr>
 <tr>
    <td>CVE-2016-0802</td>
    <td><a href="https://android.googlesource.com/kernel/msm/+/3fffc78f70dc101add8b82af878d53457713d005^%21/">ANDROID-25306181</a></td>
    <td></td>
    <td>4.4.4, 5.0, 5.1.1, 6.0, 6.0.1</td>
    <td>2015 10 26</td>
 </tr>
</table>

<h3 id="remote_code_execution_vulnerability_in_mediaserver">     </h3>

<p>

        .</p>

<p>    ,
   ,  MMS
   .</p>

<p>
  .

      .</p>
<table>
 <tr>
    <th>CVE</th>
    <th>AOSP   </th>
    <th></th>
    <th> </th>
    <th> </th>
 </tr>
 <tr>
    <td>CVE-2016-0803</td>
    <td><a href="https://android.googlesource.com/platform%2Fframeworks%2Fav/+/50270d98e26fa18b20ca88216c3526667b724ba7">ANDROID-25812794</a></td>
    <td></td>
    <td>4.4.4, 5.0, 5.1.1, 6.0, 6.0.1</td>
    <td>2015 11 19</td>
 </tr>
 <tr>
    <td>CVE-2016-0804</td>
    <td><a href="https://android.googlesource.com/platform%2Fframeworks%2Fav/+/224858e719d045c8554856b12c4ab73d2375cf33">ANDROID-25070434</a></td>
    <td></td>
    <td>5.0, 5.1.1, 6.0, 6.0.1</td>
    <td>2015 10 12</td>
 </tr>
</table>


<h3 id="elevation_of_privilege_vulnerability_in_qualcomm_performance_module">Qualcomm     </h3>


<p>Qualcomm ARM

    .

     .</p>
<table>
 <tr>
    <th>CVE</th>
    <th></th>
    <th></th>
    <th> </th>
    <th> </th>
 </tr>
 <tr>
    <td>CVE-2016-0805</td>
    <td>ANDROID-25773204*</td>
    <td></td>
    <td>4.4.4, 5.0, 5.1.1, 6.0, 6.0.1</td>
    <td>2015 11 15</td>
 </tr>
</table>

<p>*     AOSP   .
<a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus      .</p>

<h3 id="elevation_of_privilege_vulnerability_in_qualcomm_wifi_driver">Qualcomm Wi-Fi    </h3>


<p>Qualcomm Wi-Fi
      .

     .</p>
<table>
 <tr>
    <th>CVE</th>
    <th></th>
    <th></th>
    <th> </th>
    <th> </th>
 </tr>
 <tr>
    <td>CVE-2016-0806</td>
    <td>ANDROID-25344453*</td>
    <td></td>
    <td>4.4.4, 5.0, 5.1.1, 6.0, 6.0.1</td>
    <td>2015 11 15</td>
 </tr>
</table>

<p>*     AOSP   .
<a href="https://developers.google.com/android/nexus/drivers">Google  </a>  Nexus      .</p>

<h3 id="elevation_of_privilege_vulnerability_in_the_debuggerd">Debuggerd    </h3>


<p>Debuggerd
        .

         .</p>
<table>
 <tr>
    <th>CVE</th>
    <th>AOSP   </th>
    <th></th>
    <th> </th>
    <th> </th>
 </tr>
 <tr>
    <td>CVE-2016-0807</td>
    <td><a href="https://android.googlesource.com/platform%2Fsystem%2Fcore/+/d917514bd6b270df431ea4e781a865764d406120">ANDROID-25187394</a></td>
    <td></td>
    <td>6.0  6.0.1</td>
    <td>Google </td>
 </tr>
</table>


<h3 id="denial_of_service_vulnerability_in_minikin">Minikin  (DoS) </h3>


<p>Minikin
       .
   Minikin        .
             .</p>
<table>
 <tr>
    <th>CVE</th>
    <th>AOSP   </th>
    <th></th>
    <th> </th>
    <th> </th>
 </tr>
 <tr>
    <td>CVE-2016-0808</td>
    <td><a href="https://android.googlesource.com/platform/frameworks/minikin/+/ed4c8d79153baab7f26562afb8930652dfbf853b">ANDROID-25645298</a></td>
    <td></td>
    <td>5.0, 5.1.1, 6.0, 6.0.1</td>
    <td>2015 11 3</td>
 </tr>
</table>


<h3 id="elevation_of_privilege_vulnerability_in_wi-fi">Wi-Fi   </h3>


<p>Wi-Fi
    .        .

  '<a href="http://developer.android.com/guide/topics/manifest/permission-element.html#plevel"></a>'          .
          .</p>
<table>
 <tr>
    <th>CVE</th>
    <th>AOSP   </th>
    <th></th>
    <th> </th>
    <th> </th>
 </tr>
 <tr>
    <td>CVE-2016-0809</td>
    <td><a href="https://android.googlesource.com/platform/hardware/broadcom/wlan/+/2c5a4fac8bc8198f6a2635ede776f8de40a0c3e1^%21/#F0">ANDROID-25753768</a></td>
    <td></td>
    <td>6.0, 6.0.1</td>
    <td>Google </td>
 </tr>
</table>


<h3 id="elevation_of_privilege_vulnerability_in_mediaserver">     </h3>


<p>
         .
         <a href="http://developer.android.com/guide/topics/manifest/permission-element.html#plevel"></a>  <a href="http://developer.android.com/guide/topics/manifest/permission-element.html#plevel">SignatureOrSystem</a>
           .</p>
<table>
 <tr>
    <th>CVE</th>
    <th>AOSP   </th>
    <th></th>
    <th> </th>
    <th> </th>
 </tr>
 <tr>
    <td>CVE-2016-0810</td>
    <td><a href="https://android.googlesource.com/platform%2Fframeworks%2Fav/+/19c47afbc402542720ddd280e1bbde3b2277b586">ANDROID-25781119</a></td>
    <td></td>
    <td>4.4.4, 5.0, 5.1.1, 6.0, 6.0.1</td>
    <td>Google </td>
 </tr>
</table>


<h3 id="information_disclosure_vulnerability_in_libmediaplayerservice">libmediaplayerservice    </h3>


<p>libmediaplayerservice
      .
    <a href="http://developer.android.com/guide/topics/manifest/permission-element.html#plevel"></a>  <a href="http://developer.android.com/guide/topics/manifest/permission-element.html#plevel">SignatureOrSystem</a>
  .</p>
<table>
 <tr>
    <th>CVE</th>
    <th>AOSP   </th>
    <th></th>
    <th> </th>
    <th> </th>
 </tr>
 <tr>
    <td>CVE-2016-0811</td>
    <td><a href="https://android.googlesource.com/platform%2Fframeworks%2Fav/+/22f824feac43d5758f9a70b77f2aca840ba62c3b">ANDROID-25800375</a></td>
    <td></td>
    <td>6.0, 6.0.1</td>
    <td>2015 11 16</td>
 </tr>
</table>


<h3 id="elevation_of_privilege_vulnerability_in_setup_wizard">    </h3>


<p>
    .

      .</p>
<table>
 <tr>
    <th>CVE</th>
    <th>AOSP   </th>
    <th></th>
    <th> </th>
    <th> </th>
 </tr>
 <tr>
    <td>CVE-2016-0812</td>
    <td><a href="https://android.googlesource.com/platform%2Fframeworks%2Fbase/+/84669ca8de55d38073a0dcb01074233b0a417541">ANDROID-25229538</a></td>
    <td></td>
    <td>5.1.1, 6.0</td>
    <td>Google </td>
 </tr>
 <tr>
    <td>CVE-2016-0813</td>
    <td><a href="https://android.googlesource.com/platform%2Fframeworks%2Fbase/+/16a76dadcc23a13223e9c2216dad1fe5cad7d6e1">ANDROID-25476219</a></td>
    <td></td>
    <td>5.1.1, 6.0, 6.0.1</td>
    <td>Google </td>
 </tr>
</table>

<h3 id="common_questions_and_answers">   </h3>

<p>
.</p>

<p><strong>1.          ?</strong></p>

<p> LMY49G   2016 2 1      Android 6.0 .
        <a href="https://support.google.com/nexus/answer/4457705">Nexus </a> .
         .
[ro.build.version.security_patch]:[2016-02-01]</p>

<h2 id="revisions"></h2>


<ul>
  <li> 2016 2 1
  <li> 2016 2 2:   AOSP
  <li> 2016 3 7:   AOSP

</li></li></li></ul>

  </body>
</html>