CVE-2016-8458: High severity android vulnerability
An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31968442.
Affected Software
Event History
Frequently Asked Questions
Which systems should be prioritized for triage?
Android devices using Kernel-3.10 or Kernel-3.18 are identified as affected, specifically where the Synaptics touchscreen driver is present.
What access and conditions does an attacker need?
Exploitation is local and requires user interaction, with high attack complexity. The issue first requires compromise of a privileged process, after which a malicious local application could execute code in kernel context.
Is a default Android configuration known to be affected or is there a documented workaround?
The provided data does not state whether the Synaptics touchscreen driver is enabled by default or identify any workaround or mitigation when patching is unavailable.