CVE-2016-8441

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Possible buffer overflow in the hypervisor. Inappropriate usage of a static array could lead to a buffer overrun. Product: Android. Versions: Kernel 3.18. Android ID: A-31625904. References: QC-CR#1027769.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published
Jan 12, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2016

CVE-2016-84427.8Possible unauthorized memory access in the hypervisor. Lack of input validation could allow hypervisor memory to be accessed by the HLOS. PrCVE-2016-84437.8Possible unauthorized memory access in the hypervisor. Incorrect configuration provides access to subsystem page tables. Product: Android. VCVE-2016-84447.0An elevation of privilege vulnerability in the Qualcomm camera could enable a local malicious application to execute arbitrary code within tCVE-2016-84457.0An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local maliciouCVE-2016-84467.0An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local maliciouCVE-2016-84477.0An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local maliciouCVE-2016-84487.0An elevation of privilege vulnerability in MediaTek components, including the thermal driver and video driver, could enable a local maliciouCVE-2016-84497.0An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code withinCVE-2016-84507.0An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code wiCVE-2016-84517.0An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary CVE-2016-84527.0An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wiCVE-2016-84537.0An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wi
CVE-2016-8441: High severity, CVSS 7.8 | Vulnix