Elevation of Privilege Vulnerability in Broadcom Wi-Fi Driver for Android
CVE-2016-8454

7HIGH

Key Information:

Vendor

Linux
Status
Android Kernel-3.10 Kernel-3.18
Vendor
CVE Published:
12 January 2017

What is CVE-2016-8454?

The Broadcom Wi-Fi driver for Android has a vulnerability that allows local malicious applications to gain elevated privileges, potentially enabling them to execute arbitrary code in the kernel context. This vulnerability arises when a privileged process is compromised, exposing devices running Android to significant security risks. This issue affects specific versions of the Android kernel (3.10 and 3.18) and has been documented under Android ID A-32174590.

Affected Version(s)

Android Kernel-3.10 Kernel-3.18 Android Kernel-3.10 Kernel-3.18

References

https://source.android.com/security/bulletin/2017-01-01.html
x_refsource_CONFIRM
http://www.securityfocus.com/bid/95240
vdb-entryx_refsource_BID

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.