CVE-2016-6777

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-31910462. References: N-CVE-2016-6777.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published
Jan 12, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2016

CVE-2016-67787.0An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to execute arbitrary code wCVE-2016-67797.0An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to execute arbitrary code wCVE-2016-67807.0An elevation of privilege vulnerability in the HTC sound codec driver could enable a local malicious application to execute arbitrary code wCVE-2016-67817.0An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within tCVE-2016-67827.0An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within tCVE-2016-67837.0An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within tCVE-2016-67847.0An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within tCVE-2016-67857.0An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within tCVE-2016-67867.0kernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks during certain migrations, which allows loCVE-2016-67877.0kernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks during certain migrations, which allows loCVE-2016-67887.0An elevation of privilege vulnerability in the MediaTek I2C driver could enable a local malicious application to execute arbitrary code withCVE-2016-67897.8An elevation of privilege vulnerability in the NVIDIA libomx library (libnvomx) could enable a local malicious application to execute arbitr
CVE-2016-6777: High severity, CVSS 7.8 | Vulnix