AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2016-0818

MEDIUM · CVSS 5.9 EPSS 0.27%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-03-12 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 5.9. It affects Android, Java.

CVE
CVE-2016-0818
Severity
MEDIUM
CVSS
5.9
EPSS
0.27%
Android Java

Original NVD Description

The caching functionality in the TrustManagerImpl class in TrustManagerImpl.java in Conscrypt in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 mishandles the distinction between an intermediate CA and a trusted root CA, which allows man-in-the-middle attackers to spoof servers by leveraging access to an intermediate CA to issue a certificate, aka internal bug 26232830.