security/bulletin/2016-02-01.html

<html devsite>
  <head>
    <title>   Nexus  2016.</title>
    <meta name="project_path" value="/_project.yaml" />
    <meta name="book_path" value="/_book.yaml" />
  </head>
  <body>
  <!--
      Copyright 2017 The Android Open Source Project

      Licensed under the Apache License, Version 2.0 (the "License");
      you may not use this file except in compliance with the License.
      You may obtain a copy of the License at

          http://www.apache.org/licenses/LICENSE-2.0

      Unless required by applicable law or agreed to in writing, software
      distributed under the License is distributed on an "AS IS" BASIS,
      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
      See the License for the specific language governing permissions and
      limitations under the License.
  -->


<p><em> 1 2016. |  7 2016.</em></p>

<p>      Android
      Nexus

    Nexus  <a href="https://developers.google.com/android/nexus/images">  </a>.

    LMY49G    ,
AndroidM    1 2016   .  ,
     ,
  <a href="https://support.google.com/nexus/answer/4457705"> Nexus</a>.</p>

<p>     4 2016  .
Android Open Source Project (AOSP).</p>

<p>
      (,
  ,
 MMS).  ,
Wi-Fi- Broadcom,
  ,
  .</p>

<p>   .   <a href="#mitigations"> </a>
,  <a href="/security/enhancements/index.html"> </a>    ,
SafetyNet,      Android.
     .</p>

<h2 id="security_vulnerability_summary"> </h2>


<p>    ,   (CVE)
.  <a href="/security/overview/updates-resources.html#severity"></a>  ,
    ,
  .</p>
<table>
 <tr>
    <th></th>
    <th>CVE</th>
    <th> </th>
 </tr>
 <tr>
    <td>    Wi-Fi- Broadcom</td>
    <td>CVE-2016-0801<br>
        CVE-2016-0802</td>
    <td></td>
 </tr>
 <tr>
    <td>    mediaserver</td>
    <td>CVE-2016-0803<br>
        CVE-2016-0804</td>
    <td></td>
 </tr>
 <tr>
    <td>      Qualcomm</td>
    <td>CVE-2016-0805</td>
    <td></td>
 </tr>
 <tr>
    <td>   Wi-Fi- Qualcomm</td>
    <td>CVE-2016-0806</td>
    <td></td>
 </tr>
 <tr>
    <td>   Debuggerd</td>
    <td>CVE-2016-0807</td>
    <td></td>
 </tr>
 <tr>
    <td>    Minikin</td>
    <td>CVE-2016-0808</td>
    <td></td>
 </tr>
 <tr>
    <td>   Wi-Fi</td>
    <td>CVE-2016-0809</td>
    <td></td>
 </tr>
 <tr>
    <td>   mediaserver</td>
    <td>CVE-2016-0810</td>
    <td></td>
 </tr>
 <tr>
    <td>   libmediaplayerservice</td>
    <td>CVE-2016-0811</td>
    <td></td>
 </tr>
 <tr>
    <td>    </td>
    <td>CVE-2016-0812<br>
        CVE-2016-0813</td>
    <td></td>
 </tr>
</table>


<h3 id="mitigations"> </h3>


<p> ,  <a href="https://source.android.com/security/enhancements/index.html"> </a>    ,
 SafetyNet,      Android.</p>

<ul>
  <li>        Android,
        .
  <li> ,    Android,
      SafetyNet.
        .     Google Play .
   ,
,  " "   .
       -
.  ,
 ,     ,
   .     ,
       .
  <li>  Google Hangouts  Messenger
,  mediaserver, .
</li></li></li></ul>

<h3 id="acknowledgements"></h3>


<p> ,    :</p>

<ul>
  <li>   Android  Chrome: CVE-2016-0809, CVE-2016-0810
  <li>  Broadgate: CVE-2016-0801, CVE-2015-0802
  <li>   (<a href="https://twitter.com/chiachih_wu">@chiachih_wu</a>),   (<a href="https://twitter.com/Mingjian_Zhou">@Mingjian_Zhou</a>)
        <a href="http://c0reteam.org"> C0RE</a>, <a href="http://www.360safe.com/">Qihoo 360</a>: CVE-2016-0804
  <li>     Google Pixel C: CVE-2016-0812
  <li>   (<a href="https://twitter.com/@chengjia4574">@chengjia4574</a>)
        Lab IceSword, Qihoo 360: CVE-2016-0805
  <li>   (<a href="https://twitter.com/@Flanker_hqd">@Flanker_hqd</a>)
       KeenLab (<a href="https://twitter.com/keen_lab">@keen_lab</a>), Tencent: CVE-2016-0811
  <li>   (<a href="https://twitter.com/@lingtongshen">@lingtongshen</a>)
        Trend Micro (<a href="http://www.trendmicro.com">www.trendmicro.com</a>): CVE-2016-0803
  <li>   (<a href="https://twitter.com/sunblate">@sunblate</a>)  Alibaba Inc: CVE-2016-0808
  <li>   (<a href="https://twitter.com/@ebeip90">@ebeip90</a>)    Android: CVE-2016-0807
</li></li></li></li></li></li></li></li></li></li></li></ul>

<h2 id="security_vulnerability_details"> </h2>


<p>         <a href="#security_vulnerability_summary"> </a>
: ,  ,     CVE,
 ,  ,
 .
 ,        AOSP,
   ,
 .</p>

<h3 id="remote_code_execution_vulnerability_in_broadcom_wi-fi_driver">    Wi-Fi- Broadcom</h3>


<p> Wi-Fi- Broadcom   .

         .
    ,
   .     -

.</p>
<table>
 <tr>
    <th>CVE</th>
    <th></th>
    <th> </th>
    <th>,    </th>
    <th>   </th>
 </tr>
 <tr>
    <td>CVE-2016-0801</td>
    <td><a href="https://android.googlesource.com/kernel/msm/+/68cdc8df1cb6622980b791ce03e99c255c9888af^!">ANDROID-25662029</a><br>
   <a href="https://android.googlesource.com/kernel/msm/+/68cdc8df1cb6622980b791ce03e99c255c9888af^!">ANDROID-25662233</a></td>
    <td></td>
    <td>4.4.4, 5.0, 5.1.1, 6.0, 6.0.1</td>
    <td>25 2015.</td>
 </tr>
 <tr>
    <td>CVE-2016-0802</td>
    <td><a href="https://android.googlesource.com/kernel/msm/+/3fffc78f70dc101add8b82af878d53457713d005^%21/">ANDROID-25306181</a></td>
    <td></td>
    <td>4.4.4, 5.0, 5.1.1, 6.0, 6.0.1</td>
    <td>26 2015.</td>
 </tr>
</table>

<h3 id="remote_code_execution_vulnerability_in_mediaserver">    mediaserver</h3>

<p>
    mediaserver,

mediaserver.</p>

<p>     .
 ,  MMS-
  ,    .</p>

<p>    -
     mediaserver.      -
 ,    ,    .</p>
<table>
 <tr>
    <th>CVE</th>
    <th>    AOSP</th>
    <th> </th>
    <th>,    </th>
    <th>   </th>
 </tr>
 <tr>
    <td>CVE-2016-0803</td>
    <td><a href="https://android.googlesource.com/platform%2Fframeworks%2Fav/+/50270d98e26fa18b20ca88216c3526667b724ba7">ANDROID-25812794</a></td>
    <td></td>
    <td>4.4.4, 5.0, 5.1.1, 6.0, 6.0.1</td>
    <td>19 2015.</td>
 </tr>
 <tr>
    <td>CVE-2016-0804</td>
    <td><a href="https://android.googlesource.com/platform%2Fframeworks%2Fav/+/224858e719d045c8554856b12c4ab73d2375cf33">ANDROID-25070434</a></td>
    <td></td>
    <td>5.0, 5.1.1, 6.0, 6.0.1</td>
    <td>12 2015.</td>
 </tr>
</table>


<h3 id="elevation_of_privilege_vulnerability_in_qualcomm_performance_module">      Qualcomm</h3>


<p>
ARM- Qualcomm.
     .
,  -     .
     .</p>
<table>
 <tr>
    <th>CVE</th>
    <th></th>
    <th> </th>
    <th>,    </th>
    <th>   </th>
 </tr>
 <tr>
    <td>CVE-2016-0805</td>
    <td>ANDROID-25773204*</td>
    <td></td>
    <td>4.4.4, 5.0, 5.1.1, 6.0, 6.0.1</td>
    <td>15 2015.</td>
 </tr>
</table>

<p>*    AOSP.
      Nexus,
   <a href="https://developers.google.com/android/nexus/drivers">  </a>.</p>

<h3 id="elevation_of_privilege_vulnerability_in_qualcomm_wifi_driver">   Wi-Fi- Qualcomm</h3>


<p> Wi-Fi- Qualcomm
      .
 ,  -     .
     .</p>
<table>
 <tr>
    <th>CVE</th>
    <th></th>
    <th> </th>
    <th>,    </th>
    <th>   </th>
 </tr>
 <tr>
    <td>CVE-2016-0806</td>
    <td>ANDROID-25344453*</td>
    <td></td>
    <td>4.4.4, 5.0, 5.1.1, 6.0, 6.0.1</td>
    <td>15 2015.</td>
 </tr>
</table>

<p>*    AOSP.
      Nexus,
   <a href="https://developers.google.com/android/nexus/drivers">  </a>.</p>

<h3 id="elevation_of_privilege_vulnerability_in_the_debuggerd">   Debuggerd </h3>


<p>  Debuggerd
    ,  root-.    ,  -
 .      .</p>
<table>
 <tr>
    <th>CVE</th>
    <th>    AOSP</th>
    <th> </th>
    <th>,    </th>
    <th>   </th>
 </tr>
 <tr>
    <td>CVE-2016-0807</td>
    <td><a href="https://android.googlesource.com/platform%2Fsystem%2Fcore/+/d917514bd6b270df431ea4e781a865764d406120">ANDROID-25187394</a></td>
    <td></td>
    <td>6.0, 6.0.1</td>
    <td>   Google</td>
 </tr>
</table>


<h3 id="denial_of_service_vulnerability_in_minikin">    Minikin</h3>


<p>   Minikin
    .
   ,    Minikin
   .     ,
 -
.</p>
<table>
 <tr>
    <th>CVE</th>
    <th>    AOSP</th>
    <th> </th>
    <th>,    </th>
    <th>   </th>
 </tr>
 <tr>
    <td>CVE-2016-0808</td>
    <td><a href="https://android.googlesource.com/platform/frameworks/minikin/+/ed4c8d79153baab7f26562afb8930652dfbf853b">ANDROID-25645298</a></td>
    <td></td>
    <td>5.0, 5.1.1, 6.0, 6.0.1</td>
    <td>3 2015.</td>
 </tr>
</table>


<h3 id="elevation_of_privilege_vulnerability_in_wi-fi">   Wi-Fi</h3>


<p>  Wi-Fi  ,
 ,
 .     ,
       <a href="http://developer.android.com/guide/topics/manifest/permission-element.html#plevel"> normal</a> ().
  ,     ,
 .</p>
<table>
 <tr>
    <th>CVE</th>
    <th>    AOSP</th>
    <th> </th>
    <th>,    </th>
    <th>   </th>
 </tr>
 <tr>
    <td>CVE-2016-0809</td>
    <td><a href="https://android.googlesource.com/platform/hardware/broadcom/wlan/+/2c5a4fac8bc8198f6a2635ede776f8de40a0c3e1^%21/#F0">ANDROID-25753768</a></td>
    <td></td>
    <td>6.0, 6.0.1</td>
    <td>   Google</td>
 </tr>
</table>


<h3 id="elevation_of_privilege_vulnerability_in_mediaserver">   mediaserver </h3>


<p> mediaserver
        .
     ,
     ,
 (, <a href="http://developer.android.com/guide/topics/manifest/permission-element.html#plevel">Signature</a>  <a href="http://developer.android.com/guide/topics/manifest/permission-element.html#plevel">SignatureOrSystem</a>).</p>
<table>
 <tr>
    <th>CVE</th>
    <th>    AOSP</th>
    <th> </th>
    <th>,    </th>
    <th>   </th>
 </tr>
 <tr>
    <td>CVE-2016-0810</td>
    <td><a href="https://android.googlesource.com/platform%2Fframeworks%2Fav/+/19c47afbc402542720ddd280e1bbde3b2277b586">ANDROID-25781119</a></td>
    <td></td>
    <td>4.4.4, 5.0, 5.1.1, 6.0, 6.0.1</td>
    <td>   Google</td>
 </tr>
</table>


<h3 id="information_disclosure_vulnerability_in_libmediaplayerservice">   libmediaplayerservice </h3>


<p> libmediaplayerservice   ,    ,    .
  ,       ,
   (, <a href="http://developer.android.com/guide/topics/manifest/permission-element.html#plevel">Signature</a>  <a href="http://developer.android.com/guide/topics/manifest/permission-element.html#plevel">SignatureOrSystem</a>).</p>
<table>
 <tr>
    <th>CVE</th>
    <th>    AOSP</th>
    <th> </th>
    <th>,    </th>
    <th>   </th>
 </tr>
 <tr>
    <td>CVE-2016-0811</td>
    <td><a href="https://android.googlesource.com/platform%2Fframeworks%2Fav/+/22f824feac43d5758f9a70b77f2aca840ba62c3b">ANDROID-25800375</a></td>
    <td></td>
    <td>6.0, 6.0.1</td>
    <td>16 2015.</td>
 </tr>
</table>


<h3 id="elevation_of_privilege_vulnerability_in_setup_wizard">    </h3>


<p>     ,
 ,
.     ,
       .</p>
<table>
 <tr>
    <th>CVE</th>
    <th>    AOSP</th>
    <th> </th>
    <th>,    </th>
    <th>   </th>
 </tr>
 <tr>
    <td>CVE-2016-0812</td>
    <td><a href="https://android.googlesource.com/platform%2Fframeworks%2Fbase/+/84669ca8de55d38073a0dcb01074233b0a417541">ANDROID-25229538</a></td>
    <td></td>
    <td>5.1.1, 6.0</td>
    <td>   Google</td>
 </tr>
 <tr>
    <td>CVE-2016-0813</td>
    <td><a href="https://android.googlesource.com/platform%2Fframeworks%2Fbase/+/16a76dadcc23a13223e9c2216dad1fe5cad7d6e1">ANDROID-25476219</a></td>
    <td></td>
    <td>5.1.1, 6.0, 6.0.1</td>
    <td>   Google</td>
 </tr>
</table>

<h3 id="common_questions_and_answers">  </h3>

<p>      ,
  .</p>

<p><strong>1.  ,     ,     ?</strong></p>

<p>    LMY49G    ,    Android6.0    1 2016   .  ,
      ,
  <a href="https://support.google.com/nexus/answer/4457705">  Nexus</a>.  ,
   ,
 [ro.build.version.security_patch]:[2016-02-01].</p>

<h2 id="revisions"></h2>


<ul>
  <li> 1 2016.  .
  <li> 2 2016.    AOSP.
  <li> 7 2016.     AOSP.

</li></li></li></ul>

  </body>
</html>