CVE-2016-8458

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31968442.

Metrics

CVSS 3.0 7.0/10CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-264

Affected software

No affected versions have been published.

Timeline

Published
Jan 12, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2016

CVE-2016-84599.8Possible buffer overflow in storage subsystem. Bad parameters as part of listener responses to RPMB commands could lead to buffer overflow. CVE-2016-84605.5An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its CVE-2016-84615.5An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level. ThisCVE-2016-84625.5An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level. ThisCVE-2016-84635.5A denial of service vulnerability in the Qualcomm FUSE file system could enable a remote attacker to use a specially crafted file to cause aCVE-2016-84647.0An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wiCVE-2016-84657.0An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wiCVE-2016-84667.0An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wiCVE-2016-84675.5An elevation of privilege vulnerability in the bootloader could enable a local attacker to execute arbitrary modem commands on the device. TCVE-2016-84687.0An elevation of privilege vulnerability in Binder could enable a local malicious application to execute arbitrary code within the context ofCVE-2016-84694.7An information disclosure vulnerability in the camera driver could enable a local malicious application to access data outside of its permisCVE-2016-84704.7An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its perm
CVE-2016-8458: High severity, CVSS 7.0 | Vulnix