CVE-2016-3853

MEDIUM

Google Play services <2016-08-05 - Info Disclosure

Title source: llm

Description

Google Play services in Android before 2016-08-05 on Nexus devices allow local users to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 26803208.

Scores

CVSS v3 5.5
EPSS 0.0001
EPSS Percentile 1.5%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Classification

CWE
CWE-264
Status draft

Affected Products (1)

google/android < 6.0.1

Timeline

Published Aug 05, 2016
Tracked Since Feb 18, 2026