CVE-2016-3850

High

Published: 05/08/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Integer overflow in app/aboot/aboot.c in the Qualcomm bootloader in Android before 2016-08-05 on Nexus 5, 5X, 6P, and 7 (2013) devices allows attackers to gain privileges via a crafted header field in a boot image.

Risk Assessment

This vulnerability may lead to privilege escalation, posing a serious threat to the security of devices and user data.

Recommendation

It is recommended to update Android to a version after 2016-08-05 to mitigate this vulnerability.

Other vulnerabilities in Qualcomm bootloader in Android

CVE-2016-6729High
CVE-2016-6729 is a vulnerability in the Qualcomm bootloader in Android before 2016-11-05 that allows a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.

Original NVD description (English source)