CVE-2016-10291

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

An elevation of privilege vulnerability in the Qualcomm Slimbus driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-34030871. References: QC-CR#986837.

Metrics

CVSS 3.0 7.0/10CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-264

Affected software

No affected versions have been published.

Timeline

Published
May 12, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2016

CVE-2016-102925.5A denial of service vulnerability in the Qualcomm Wi-Fi driver could enable a proximate attacker to cause a denial of service in the Wi-Fi sCVE-2016-102934.7An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of itCVE-2016-102944.7An information disclosure vulnerability in the Qualcomm power driver could enable a local malicious application to access data outside of itCVE-2016-102954.7An information disclosure vulnerability in the Qualcomm LED driver could enable a local malicious application to access data outside of its CVE-2016-102964.7An information disclosure vulnerability in the Qualcomm shared memory driver could enable a local malicious application to access data outsiCVE-2016-102977.0In TrustZone in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulnerability could potentiCVE-2016-102989.8An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3639CVE-2016-102999.8An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-3257CVE-2016-10308.1Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attCVE-2016-103046.5The SAP EP-RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to cause a denial of service (out-of-memory erroCVE-2016-103059.8Trango Apex <= 2.1.1, ApexLynx < 2.0, ApexOrion < 2.0, ApexPlus <= 3.2.0, Giga <= 2.6.1, GigaLynx < 2.0, GigaOrion < 2.0, GigaPlus <= 3.2.3,CVE-2016-103069.8Trango Altum AC600 devices have a built-in, hidden root account, with a default password of abcd1234. This account is accessible via SSH and