CVE-2016-10289: High severity android vulnerability

Published May 1, 2017

Updated

An elevation of privilege vulnerability in the Qualcomm crypto driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33899710. References: QC-CR#1116295.

Affected Software

3 affected components

Google Android

Linux Linux Kernel=3.10

Linux Linux Kernel=3.18

Remediation

Patch Available

https://source.android.com/security/bulletin/2017-05-01

Event History

May 1, 2017

CVE Published

via Android·12:00 AM

May 12, 2017

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2016-10289?

CVE-2016-10289 is rated as High severity due to its potential for exploitation to gain elevated privileges.

How do I fix CVE-2016-10289?

To mitigate CVE-2016-10289, you should update your Android kernel to the latest version that addresses this vulnerability.

What versions of Android are affected by CVE-2016-10289?

CVE-2016-10289 affects Android versions with kernel versions 3.10 and 3.18.

Can CVE-2016-10289 be exploited remotely?

CVE-2016-10289 requires local access, as it involves executing code within the kernel context.

What type of vulnerability is CVE-2016-10289?

CVE-2016-10289 is classified as an elevation of privilege vulnerability, allowing execution of arbitrary code.