CVE-2016-3900

cmds/servicemanager/service_manager.c in ServiceManager in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 does not properly restrict service registration, which allows attackers to gain privileges via a crafted application, aka internal bug 29431260.

• CWE-264

• http://source.android.com/security/bulletin/2016-10-01.htmlVendor Advisory
• http://www.securityfocus.com/bid/93291
• https://android.googlesource.com/platform/frameworks/native/+/047eec456943dc082e33220d28abb7df4e089f69Issue Tracking, Patch
• https://android.googlesource.com/platform/frameworks/native/+/d3c6ce463ac91ecbeb2128beb475d31d3ca6ef42Issue Tracking, Patch
• http://source.android.com/security/bulletin/2016-10-01.htmlVendor Advisory
• http://www.securityfocus.com/bid/93291
• https://android.googlesource.com/platform/frameworks/native/+/047eec456943dc082e33220d28abb7df4e089f69Issue Tracking, Patch
• https://android.googlesource.com/platform/frameworks/native/+/d3c6ce463ac91ecbeb2128beb475d31d3ca6ef42Issue Tracking, Patch

Published

Oct 10, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-3894The Qualcomm DMA component in Android before 2016-09-05 on N…
• CVE-2016-3895Integer overflow in the Region::unflatten function in libs/u…
• CVE-2016-3896AOSP Mail in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5…
• CVE-2016-3897The WifiEnterpriseConfig class in net/wifi/WifiEnterpriseCon…
• CVE-2016-3898Telephony in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1,…
• CVE-2016-3899OMXCodec.cpp in libstagefright in mediaserver in Android 4.x…
• CVE-2016-3901Multiple integer overflows in drivers/crypto/msm/qcedev.c in…
• CVE-2016-3902drivers/platform/msm/ipa/ipa_qmi_service.c in the Qualcomm I…
• CVE-2016-3903drivers/media/platform/msm/camera_v2/sensor/csid/msm_csid.c …
• CVE-2016-3904An elevation of privilege vulnerability in the Qualcomm bus …
• CVE-2016-3905CORE/HDD/src/wlan_hdd_main.c in the Qualcomm Wi-Fi driver in…
• CVE-2016-3906An information disclosure vulnerability in Qualcomm componen…