CVE-2016-8434

High

Published: 12/01/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2016-8434 is a privilege escalation vulnerability in the Qualcomm GPU driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.

Risk Assessment

The risk to the organization is that a local attacker could gain full control over the device, potentially leading to data loss and requiring reflashing of the operating system.

Recommendation

It is recommended to update the Android system to the latest version to patch this vulnerability and to monitor devices for unauthorized applications.

Other vulnerabilities in Sterownik GPU Qualcomm

CVE-2016-2503High
The Qualcomm GPU driver in Android before 2016-07-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application.

Original NVD description (English source)

An elevation of privilege vulnerability in the Qualcomm GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-32125137. References: QC-CR#1081855.