Vulnerability Details CVE-2016-3759
The Framework APIs in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-07-01 allow attackers to read backup data via a crafted application that leverages priv-app access to insert a backup transport, aka internal bug 28406080.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 19.4%
CVSS Severity
CVSS v3 Score 3.3
CVSS v2 Score 5.0
Products affected by CVE-2016-3759
-
cpe:2.3:o:google:android:5.0
-
cpe:2.3:o:google:android:5.0.1
-
cpe:2.3:o:google:android:5.1
-
cpe:2.3:o:google:android:5.1.0
-
cpe:2.3:o:google:android:6.0
-
cpe:2.3:o:google:android:6.0.1