CVE-2016-3831
Status: ModifiedHigh (7.5)—
Severity7.5High · CVSS 3.0
Exploitation probability0.77 %higher than 55% of CVEs
Active exploitationNonot in the CISA catalog
Public exploitNot knownno public code found
The telephony component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows remote attackers to cause a denial of service (device crash) via a NITZ time value of 2038-01-19 or later that is mishandled by the system clock, aka internal bug 29083635, related to a "Year 2038 problem."
CVSS
- Base score
- 7.5
- Version
- 3.0
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days
- 0.77 %
- Percentile among all scored CVEs
- 55
- Score date
- 10/24/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- CWE-20
References
Show 6 references
- http://source.android.com/security/bulletin/2016-08-01.html
- http://www.securityfocus.com/bid/92230
- https://android.googlesource.com/platform/frameworks/opt/telephony/+/f47bc301ccbc5e6d8110afab5a1e9bac1d4ef058
- http://source.android.com/security/bulletin/2016-08-01.html
- http://www.securityfocus.com/bid/92230
- https://android.googlesource.com/platform/frameworks/opt/telephony/+/f47bc301ccbc5e6d8110afab5a1e9bac1d4ef058
Raw JSON (NVD)
Show
{
"id": "CVE-2016-3831",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 7.5,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "security@android.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2016-08-05T20:59:21.467",
"references": [
{
"url": "http://source.android.com/security/bulletin/2016-08-01.html",
"tags": [
"Vendor Advisory"
],
"source": "security@android.com"
},
{
"url": "http://www.securityfocus.com/bid/92230",
"source": "security@android.com"
},
{
"url": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/f47bc301ccbc5e6d8110afab5a1e9bac1d4ef058",
"tags": [
"Issue Tracking",
"Patch"
],
"source": "security@android.com"
},
{
"url": "http://source.android.com/security/bulletin/2016-08-01.html",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/92230",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://android.googlesource.com/platform/frameworks/opt/telephony/+/f47bc301ccbc5e6d8110afab5a1e9bac1d4ef058",
"tags": [
"Issue Tracking",
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The telephony component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows remote attackers to cause a denial of service (device crash) via a NITZ time value of 2038-01-19 or later that is mishandled by the system clock, aka internal bug 29083635, related to a \"Year 2038 problem.\""
},
{
"lang": "es",
"value": "El componente telephony en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 2016-08-01 permite a atacantes remotos provocar una denegación de servicio (caída de dispositivo) a través de un valor de tiempo NITZ de 2038-01-19 o posterior que no es manejado adecuadamente por el reloj del sistema, también conocido como error interno 29083635, relacionado con un \"Year 2038 problem\"."
}
],
"lastModified": "2026-06-17T00:46:25.080",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
},
{
"criteria": "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BB318EA4-2908-4B91-8DBB-20008FDF528A"
},
{
"criteria": "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F4E46A9-B652-47CE-92E8-01021E57724B"
},
{
"criteria": "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
},
{
"criteria": "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
},
{
"criteria": "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1DA9F0F7-D592-481E-884C-B1A94E702825"
},
{
"criteria": "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
},
{
"criteria": "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
},
{
"criteria": "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
},
{
"criteria": "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "49413FF7-7910-4F74-B106-C3170612CB2A"
},
{
"criteria": "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
},
{
"criteria": "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
},
{
"criteria": "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "98C32982-095C-4628-9958-118A3D3A9CAA"
},
{
"criteria": "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
},
{
"criteria": "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
},
{
"criteria": "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
},
{
"criteria": "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7C4E6353-B77A-464F-B7DE-932704003B33"
},
{
"criteria": "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "77125688-2CCA-4990-ABB2-551D47CB0CDD"
},
{
"criteria": "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
},
{
"criteria": "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
},
{
"criteria": "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
},
{
"criteria": "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "691FA41B-C2CE-413F-ABB1-0B22CB322807"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "security@android.com"
}