CVE-2016-8405
Description
An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31651010.
CWE
- (none)
Affected
- Google Inc. / Android — v=Kernel-3.10 [affected]; v=Kernel-3.18 [affected]
CVSS
- (none)
References
- https://source.android.com/security/bulletin/2016-12-01.html x_refsource_CONFIRM
- http://www.securityfocus.com/bid/94686 vdb-entry, x_refsource_BID
- http://www.debian.org/security/2017/dsa-3791 vendor-advisory, x_refsource_DEBIAN
Source
cvelistV5-main/cves/2016/8xxx/CVE-2016-8405.json