CVE-2016-8461

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level. This issue is rated as High because it could be used to access sensitive data. Product: Android. Versions: Kernel-3.18. Android ID: A-32369621.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published
Jan 12, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2016

CVE-2016-84625.5An information disclosure vulnerability in the bootloader could enable a local attacker to access data outside of its permission level. ThisCVE-2016-84635.5A denial of service vulnerability in the Qualcomm FUSE file system could enable a remote attacker to use a specially crafted file to cause aCVE-2016-84647.0An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wiCVE-2016-84657.0An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wiCVE-2016-84667.0An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wiCVE-2016-84675.5An elevation of privilege vulnerability in the bootloader could enable a local attacker to execute arbitrary modem commands on the device. TCVE-2016-84687.0An elevation of privilege vulnerability in Binder could enable a local malicious application to execute arbitrary code within the context ofCVE-2016-84694.7An information disclosure vulnerability in the camera driver could enable a local malicious application to access data outside of its permisCVE-2016-84704.7An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permCVE-2016-84714.7An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permCVE-2016-84724.7An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permCVE-2016-84734.7An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside o
CVE-2016-8461: Medium severity, CVSS 5.5 | Vulnix