CVE-2016-8466

HighCVSS 7.0/10Last modified Jun 17, 2026

Description

An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Moderate because it first requires compromising a privileged process and is mitigated by current platform configurations. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31822524. References: B-RB#105268.

Metrics

CVSS 3.0 7.0/10CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-264

Affected software

VendorProductVersions
n/aAndroid Kernel-3.10 Kernel-3.18Android Kernel-3.10 Kernel-3.18

References

Timeline

Published
Jan 12, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2016

CVE-2016-84675.5An elevation of privilege vulnerability in the bootloader could enable a local attacker to execute arbitrary modem commands on the device. TCVE-2016-84687.0An elevation of privilege vulnerability in Binder could enable a local malicious application to execute arbitrary code within the context ofCVE-2016-84694.7An information disclosure vulnerability in the camera driver could enable a local malicious application to access data outside of its permisCVE-2016-84704.7An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permCVE-2016-84714.7An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permCVE-2016-84724.7An information disclosure vulnerability in the MediaTek driver could enable a local malicious application to access data outside of its permCVE-2016-84734.7An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside oCVE-2016-84744.7An information disclosure vulnerability in the STMicroelectronics driver could enable a local malicious application to access data outside oCVE-2016-84754.7An information disclosure vulnerability in the HTC input driver could enable a local malicious application to access data outside of its perCVE-2016-84767.0An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wiCVE-2016-84774.7An information disclosure vulnerability in the Qualcomm camera driver could enable a local malicious application to access data outside of iCVE-2016-84784.7An information disclosure vulnerability in the Qualcomm video driver could enable a local malicious application to access data outside of it
CVE-2016-8466: High severity, CVSS 7.0 | Vulnix