CVE-2016-3861

Priority
Description
LibUtils in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before
5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 mishandles
conversions between Unicode character encodings with different encoding
widths, which allows remote attackers to execute arbitrary code or cause a
denial of service (heap-based buffer overflow) via a crafted file, aka
internal bug 29250543.
Notes
Package
Upstream:needs-triage
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE (trusty was ignored [abandoned])
Ubuntu 16.04 LTS (Xenial Xerus):ignored (abandoned)
Ubuntu 18.04 LTS (Bionic Beaver):DNE
Ubuntu 19.10 (Eoan Ermine):DNE
Ubuntu 20.04 (Focal Fossa):DNE
Package
Upstream:needs-triage
Ubuntu 12.04 ESM (Precise Pangolin):DNE
Ubuntu 14.04 ESM (Trusty Tahr):DNE
Ubuntu 16.04 LTS (Xenial Xerus):needed
Ubuntu 18.04 LTS (Bionic Beaver):not-affected (1:7.0.0+r1-4)
Ubuntu 19.10 (Eoan Ermine):not-affected (1:7.0.0+r1-4)
Ubuntu 20.04 (Focal Fossa):not-affected (1:7.0.0+r1-4)
More Information

Updated: 2020-04-24 03:29:52 UTC (commit d3f8a6ed481830fb100109a132bef581fc4176fe)