Exploitation Summary
EIP tracks 2 public exploits for CVE-2016-3861. PoCs published by Google Security Research, kswzzl.
AI-analyzed exploit summary This exploit demonstrates a heap-buffer-overflow in Android's libutils library due to inconsistent handling of invalid surrogate pairs in UTF16 conversion functions. The PoC triggers the vulnerability via the 'android.security.keystore' service, leading to a crash or potential code execution.
Description
LibUtils in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 mishandles conversions between Unicode character encodings with different encoding widths, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted file, aka internal bug 29250543.
Exploits (2)
This exploit demonstrates a heap-buffer-overflow in Android's libutils library due to inconsistent handling of invalid surrogate pairs in UTF16 conversion functions. The PoC triggers the vulnerability via the 'android.security.keystore' service, leading to a crash or potential code execution.
This repository contains a functional exploit for CVE-2016-3861, a vulnerability in Android's libutils library. The exploit dynamically generates MP4 files in the browser to achieve PC control, with additional heap grooming for specific AOSP builds.
References (8)
Scores
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H