CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.0. It affects Android, Java.
CVE
CVE-2016-3890
Severity
HIGH
CVSS
7
EPSS
0.74%
Android Java
Original NVD Description
The Java Debug Wire Protocol (JDWP) implementation in adb/sockets.cpp in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 mishandles socket close operations, which allows attackers to gain privileges via a crafted application, aka internal bug 28347842.