CVE-2016-3867
HighSummary
The Qualcomm IPA driver in Android before 2016-09-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application.
Risk Assessment
Attackers can exploit this vulnerability to gain unauthorized access to the system, potentially leading to serious security breaches.
Recommendation
It is recommended to update the Android system to a version after 2016-09-05 to mitigate this vulnerability.
Other vulnerabilities in Qualcomm IPA driver
See all- CVE-2017-0746High
CVE-2017-0746 is a privilege escalation vulnerability in the Qualcomm ipa driver affecting the Android kernel.
- CVE-2017-0525High
CVE-2017-0525 describes an elevation of privilege vulnerability in the Qualcomm IPA driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it requires compromising a privileged process first.
- CVE-2017-0456High
CVE-2017-0456 describes an elevation of privilege vulnerability in the Qualcomm IPA driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it requires compromising a privileged process first.
Original NVD description (English source)
The Qualcomm IPA driver in Android before 2016-09-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application, aka Android internal bug 28919863 and Qualcomm internal bug CR1037897.