CVE-2016-10287

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33784446. References: QC-CR#1112751.

Metrics

CVSS 3.0 7.0/10CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-264

Affected software

No affected versions have been published.

Timeline

Published: May 12, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-102887.0An elevation of privilege vulnerability in the Qualcomm LED driver could enable a local malicious application to execute arbitrary code with CVE-2016-102897.0An elevation of privilege vulnerability in the Qualcomm crypto driver could enable a local malicious application to execute arbitrary code w CVE-2016-10298.8Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows att CVE-2016-102907.0An elevation of privilege vulnerability in the Qualcomm shared memory driver could enable a local malicious application to execute arbitrary CVE-2016-102917.0An elevation of privilege vulnerability in the Qualcomm Slimbus driver could enable a local malicious application to execute arbitrary code CVE-2016-102925.5A denial of service vulnerability in the Qualcomm Wi-Fi driver could enable a proximate attacker to cause a denial of service in the Wi-Fi s CVE-2016-102934.7An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of it CVE-2016-102944.7An information disclosure vulnerability in the Qualcomm power driver could enable a local malicious application to access data outside of it CVE-2016-102954.7An information disclosure vulnerability in the Qualcomm LED driver could enable a local malicious application to access data outside of its CVE-2016-102964.7An information disclosure vulnerability in the Qualcomm shared memory driver could enable a local malicious application to access data outsi CVE-2016-102977.0In TrustZone in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulnerability could potenti CVE-2016-102989.8An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3639