CVE-2016-8459

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Possible buffer overflow in storage subsystem. Bad parameters as part of listener responses to RPMB commands could lead to buffer overflow. Product: Android. Versions: Kernel 3.18. Android ID: A-32577972. References: QC-CR#988462.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published
Jan 12, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2016

CVE-2016-84605.5An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its CVE-2016-84615.5An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level. ThisCVE-2016-84625.5An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level. ThisCVE-2016-84635.5A denial of service vulnerability in the Qualcomm FUSE file system could enable a remote attacker to use a specially crafted file to cause aCVE-2016-84647.0An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wiCVE-2016-84657.0An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wiCVE-2016-84667.0An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wiCVE-2016-84675.5An elevation of privilege vulnerability in the bootloader could enable a local attacker to execute arbitrary modem commands on the device. TCVE-2016-84687.0An elevation of privilege vulnerability in Binder could enable a local malicious application to execute arbitrary code within the context ofCVE-2016-84694.7An information disclosure vulnerability in the camera driver could enable a local malicious application to access data outside of its permisCVE-2016-84704.7An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permCVE-2016-84714.7An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its perm
CVE-2016-8459: Critical severity, CVSS 9.8 | Vulnix