CVE-2016-8457: High severity android vulnerability
An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-32219453. References: B-RB#106116.
Affected Software
Event History
Frequently Asked Questions
Which systems are exposed?
Exposure is limited to Android devices using the affected Broadcom Wi-Fi driver on Kernel-3.10 or Kernel-3.18. The affected component runs in kernel context, so successful exploitation can compromise confidentiality, integrity, and availability of the device.
What must an attacker do to exploit this issue?
An attacker needs local code execution through a malicious application and user interaction, and the issue has high attack complexity. The vulnerability is described as requiring prior compromise of a privileged process before arbitrary kernel-context code execution is possible.
How can I determine whether a device may be affected?
The available information does not state whether the vulnerable Broadcom Wi-Fi driver is enabled or present in Android default configurations. To assess exposure, identify whether the device uses that driver and whether it runs Kernel-3.10 or Kernel-3.18.