CVE-2016-8442
HighSummary
Possible unauthorized memory access in the hypervisor. Lack of input validation could allow hypervisor memory to be accessed by the HLOS.
Risk Assessment
The organization may be exposed to unauthorized access to critical data in the system, potentially leading to serious security breaches.
Recommendation
It is recommended to update the system to the latest kernel version to patch this vulnerability and implement additional input validation mechanisms.
Other vulnerabilities in Android Kernel 3.18
See all- CVE-2017-13174High
CVE-2017-13174 is a privilege escalation vulnerability in the Android kernel. It affects Android kernel versions and may allow unauthorized access to system resources.
- CVE-2017-13168High
CVE-2017-13168 is a privilege escalation vulnerability in the Android kernel SCSI driver. It affects the Android kernel in versions related to Android ID A-65023233.
- CVE-2017-13167High
CVE-2017-13167 describes an elevation of privilege vulnerability in the kernel sound timer of Android. It affects the Android kernel in versions that do not include patches.
- CVE-2017-13164High
An information disclosure vulnerability in the kernel binder driver of Android. It affects the Android kernel and may lead to unauthorized access to sensitive data.
- CVE-2017-13163High
CVE-2017-13163 is a privilege escalation vulnerability in the MTP USB driver in the Android kernel. It affects Android kernel versions.
- CVE-2017-13162High
CVE-2017-13162 is a privilege escalation vulnerability in the Android kernel, which may allow unauthorized access to system resources.
- CVE-2017-0864High
CVE-2017-0864 is a privilege escalation vulnerability in the MediaTek ioctl (flashlight) in Android. It affects the Android kernel.
- CVE-2017-0862High
CVE-2017-0862 is a privilege escalation vulnerability in the Android kernel. It affects unspecified versions of the Android kernel.
- CVE-2017-0794High
CVE-2017-0794 is a privilege escalation vulnerability in the Upstream kernel SCSI driver. It affects the Android operating system and its kernel.
- CVE-2017-0750High
An elevation of privilege vulnerability in the Upstream Linux file system. It affects Android kernels.
Original NVD description (English source)
Possible unauthorized memory access in the hypervisor. Lack of input validation could allow hypervisor memory to be accessed by the HLOS. Product: Android. Versions: Kernel 3.18. Android ID: A-31625910. QC-CR#1038173.