CVE-2016-8424: Critical severity android vulnerability

Published Jan 3, 2017

Updated

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-31606947. References: N-CVE-2016-8424.

Affected Software

2 affected components

Google Android

Linux Linux Kernel=3.10

Event History

Jan 3, 2017

CVE Published

via Android·12:00 AM

Jan 12, 2017

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

DescriptionWeakness

Data Sourced

via NVD·08:59 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2016-8424?

CVE-2016-8424 is rated as Critical due to the potential for local device compromise.

How do I fix CVE-2016-8424?

To mitigate CVE-2016-8424, update your NVIDIA GPU drivers to the latest version.

Which systems are affected by CVE-2016-8424?

CVE-2016-8424 affects systems running specific versions of the Linux kernel and Android.

What kind of exploitation is possible with CVE-2016-8424?

CVE-2016-8424 allows a local malicious application to execute arbitrary code within the kernel context.

Is there a workaround for CVE-2016-8424?

There are no known workarounds for CVE-2016-8424; updating the driver is the recommended action.