CVE-2016-8427: Critical severity android vulnerability

Published Jan 3, 2017

Updated

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-31799885. References: N-CVE-2016-8427.

Affected Software

2 affected components

Google Android

Linux Linux Kernel=3.10

Event History

Jan 3, 2017

CVE Published

via Android·12:00 AM

Jan 12, 2017

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

DescriptionWeakness

Data Sourced

via NVD·08:59 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2016-8427?

CVE-2016-8427 is rated as Critical due to the potential for permanent device compromise.

How do I fix CVE-2016-8427?

To fix CVE-2016-8427, it is recommended to update the NVIDIA GPU driver to the latest version available.

What systems are affected by CVE-2016-8427?

CVE-2016-8427 affects NVIDIA GPU drivers on Google Android and Linux Kernel version 3.10.

What exploit can be performed with CVE-2016-8427?

CVE-2016-8427 allows a local malicious application to execute arbitrary code within the context of the kernel.

Is there a possibility of a workaround for CVE-2016-8427?

Currently, there are no specific workarounds for CVE-2016-8427 other than applying the appropriate driver updates.