CVE-2016-8456: High severity android vulnerability
An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32219255. References: B-RB#105580.
Affected Software
Event History
Frequently Asked Questions
Which systems are realistically exposed?
Exposure is limited to Android devices using the affected Broadcom Wi-Fi driver on Kernel-3.10 or Kernel-3.18. The issue is local rather than remotely exploitable over the network.
What prerequisites does exploitation require?
An attacker needs to run a malicious application locally and must first compromise a privileged process. Successful exploitation can result in arbitrary code execution in the kernel context.
What can be done if an affected device cannot be patched immediately?
The provided data does not identify a configuration-based workaround or mitigation when patching is unavailable. Prioritize applying the relevant Android security update for affected devices.