AndroidVulnerabilities.org

CVE-2016-2108

(json)

• CVE numbers: CVE-2016-2108 [Bulletin-CVE-2016-2108]
• Coordinated disclosure?: unknown
• Categories: Qualcomm closed-source components
• Details: The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a denial of service (buffer underflow and memory corruption) via an ANY field in crafted serialized data, aka the "negative zero" issue. [NIST-CVE-2016-2108]
• Discovered by: on: Unknown
• Reported on: 2018-07-01 [Bulletin-CVE-2016-2108]
• Fixed on: Unknown
• Fix released on: 2018-07-05 [Bulletin-CVE-2016-2108]
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-2108]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-25