CVE-2016-8435

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.18. Android ID: A-32700935. References: N-CVE-2016-8435.

Metrics

CVSS 3.0 7.0/10CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published: Jan 12, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-84367.8An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code wi CVE-2016-84379.8Improper input validation in Access Control APIs. Access control API may return memory range checking incorrectly. Product: Android. Version CVE-2016-84389.8Integer overflow leading to a TOCTOU condition in hypervisor PIL. An integer overflow exposes a race condition that may be used to bypass (P CVE-2016-84399.8Possible buffer overflow in trust zone access control API. Buffer overflow may occur due to lack of buffer size checking. Product: Android. CVE-2016-84409.8Possible buffer overflow in SMMU system call. Improper input validation in ADSP SID2CB system call may result in hypervisor memory overwrite CVE-2016-84417.8Possible buffer overflow in the hypervisor. Inappropriate usage of a static array could lead to a buffer overrun. Product: Android. Versions CVE-2016-84427.8Possible unauthorized memory access in the hypervisor. Lack of input validation could allow hypervisor memory to be accessed by the HLOS. Pr CVE-2016-84437.8Possible unauthorized memory access in the hypervisor. Incorrect configuration provides access to subsystem page tables. Product: Android. V CVE-2016-84447.0An elevation of privilege vulnerability in the Qualcomm camera could enable a local malicious application to execute arbitrary code within t CVE-2016-84457.0An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local maliciou CVE-2016-84467.0An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local maliciou CVE-2016-84477.0An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local maliciou