CVE-2016-8450: High severity android vulnerability
An elevation of privilege vulnerability in the Qualcomm sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-32450563. References: QC-CR#880388.
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to this vulnerability?
The issue affects Android devices using the vulnerable Qualcomm sound driver in the listed Android and Linux kernel software. Exploitation is local, so an attacker would need to get a malicious application onto the device and have a user run it.
What does an attacker need to exploit it?
The CVSS vector indicates local access, high attack complexity, no privileges required, and user interaction required. The vulnerability is also described as requiring compromise of a privileged process before arbitrary kernel-context code execution can occur.
How can I determine whether a device is affected?
The available data does not state whether the Qualcomm sound driver is enabled in a default Android configuration. Determine exposure by checking whether the affected device kernel includes the Qualcomm sound driver and whether it has received the Android security update addressing Android ID A-32450563.