Elevation of Privilege Vulnerability in NVIDIA GPU Driver for Android
CVE-2016-8424

7.8HIGH

Key Information:

Vendor

Linux
Status
Android Kernel-3.10
Vendor
CVE Published:
12 January 2017

What is CVE-2016-8424?

The NVIDIA GPU driver for Android has a vulnerability that allows local malicious applications to execute arbitrary code with kernel-level privileges. This flaw poses a significant risk of permanent device compromise, potentially necessitating a complete reinstallation of the operating system to remedy the situation. The affected version is Kernel 3.10, which could be exploited by attackers to gain unauthorized access and control over the system's kernel operations.

Affected Version(s)

Android Kernel-3.10 Android Kernel-3.10

References

https://source.android.com/security/bulletin/2017-01-01.html
x_refsource_CONFIRM
http://www.securityfocus.com/bid/95231
vdb-entryx_refsource_BID
http://nvidia.custhelp.com/app/answers/detail/a_id/4561
x_refsource_CONFIRM

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.