CVE-2016-8392

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31385862. References: QC-CR#1073136.

Metrics

CVSS 3.0 7.0/10CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published: Jan 12, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-83937.0An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary CVE-2016-83947.0An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary CVE-2016-83954.7A denial of service vulnerability in the NVIDIA camera driver could enable an attacker to cause a local permanent denial of service, which m CVE-2016-83965.5An information disclosure vulnerability in the MediaTek video driver could enable a local malicious application to access data outside of it CVE-2016-83975.5An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its CVE-2016-83989.8Unauthenticated messages processed by the UE. Certain NAS messages are processed when no EPS security context exists in the UE. Product: And CVE-2016-83997.0An elevation of privilege vulnerability in the kernel networking subsystem could enable a local malicious application to execute arbitrary c CVE-2016-84005.5An information disclosure vulnerability in the NVIDIA librm library (libnvrm) could enable a local malicious application to access data outs CVE-2016-84014.7An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could CVE-2016-84024.7An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could CVE-2016-84034.7An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could CVE-2016-84044.7An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could