CVE Catalog

CVE-2016-8468

High
Published: Translated: NVD NIST

Summary

A vulnerability in Binder allows a local malicious application to execute arbitrary code within the context of a privileged process. It requires compromising a privileged process first, which mitigates the risk.

Risk Assessment

The risk to the organization involves the potential for executing malicious code in the context of a privileged process, which could lead to serious security breaches.

Recommendation

It is recommended to monitor and update Android systems and to follow best practices for application security.

Other vulnerabilities in Binder

Original NVD description (English source)

An elevation of privilege vulnerability in Binder could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as Moderate because it first requires compromising a privileged process and is mitigated by current platform configurations. Product: Android. Versions: Kernel-3.18. Android ID: A-32394425.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS