CVE-2016-8435

CVE-2016-8435 is an elevation of privilege in the NVIDIA GPU driver that could allow a local attacker to execute arbitrary code in the kernel context on Android devices (Kernel-3.18). The issue is addressed in Android security updates released around the 2017-01-01/2017-01-05 patch levels; Pixel ...

CVE-2016-8449

CVE-2016-8449 is an elevation-of-privilege vulnerability in the NVIDIA Tegra GPU/NVMAP kernel driver. The issue arises from referencing memory after it has been freed in NVMAP, which can allow a local attacker to escalate privileges and potentially execute code in kernel context. Affected platfor...

CVE-2016-8430

CVE-2016-8430 affects the NVIDIA Tegra kernel driver (NVHOST) on Android, where a mismanaged memory reference (user-after-free) can let a local attacker cause a denial of service or escalate to kernel code execution. The issue is described as elevation of privilege with potential for local persis...

CVE-2016-8424

CVE-2016-8424 is an elevation-of-privilege in the NVIDIA Tegra GPU driver (NVMAP) that can let a local, unprivileged process execute code in kernel context by referencing memory after it has been freed (use-after-free). Affected: Android devices using the NVIDIA Tegra kernel driver (Kernel-3.10)....

CVE-2016-8431

CVE-2016-8431 describes a local elevation of privilege in the NVIDIA GPU driver on Android (Android Kernel 3.18; Pixel C). The vulnerability can allow a local malicious process to execute arbitrary code in kernel context, with potential for permanent device compromise. Connected documents indicat...

CVE-2016-8425

CVE-2016-8425 affects the NVIDIA Tegra kernel driver (NVHOST). The issue is a use-after-free in memory handling that can allow a local unprivileged process to escalate to the kernel, potentially enabling arbitrary code execution or denial of service. Exploitation status is not provided in the sup...

CVE-2016-8425

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

CVE-2016-8432

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

CVE-2016-8435

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

CVE-2016-8449

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10...

CVE-2016-8434

CVE-2016-8434 is a local elevation-of-privilege vulnerability in the Qualcomm GPU driver that could allow a malicious local app to execute arbitrary code in the kernel context on Android with Kernel-3.10. The impact is a potential local root compromise. The vulnerability is documented in NVD with...

CVE-2016-8429

CVE-2016-8429 concerns the NVIDIA Tegra kernel driver (NVMAP) in Android. The connected NVIDIA bulletins describe a memory safety issue in NVMAP where memory references after free can lead to denial of service and possible privilege escalation, enabling a local attacker to execute code in the ker...

CVE-2016-8424

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

CVE-2016-8427

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

CVE-2016-8430

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...

CVE-2016-8426

CVE-2016-8426 affects the NVIDIA GPU driver on Android (kernel-3.10). It is an elevation-of-privilege vulnerability that could let a local malicious app execute arbitrary code in kernel context, potentially causing a local permanent device compromise. The NVD entry cites CVSSv3: LOCAL access, hig...

CVE-2016-8428

CVE-2016-8428 affects NVIDIA Tegra kernel driver (NVMAP). The issue allows reading/writing memory outside the intended buffer boundary, potentially enabling a local attacker to escalate privileges or cause a denial of service. Impact is kernel context level on affected Android kernels; CVSS vecto...

CVE-2016-8427

CVE-2016-8427 affects the NVIDIA Tegra kernel driver (NVHOST). The connected NVIDIA bulletin entry for CVE-2016-8427 notes a memory-after-free vulnerability in NVHOST that can lead to denial of service or escalation of privileges, enabling a local attacker to execute code in kernel context. The i...

CVE-2016-8432

CVE-2016-8432 describes an elevation-of-privilege in the NVIDIA GPU driver on Android with kernel-3.18, enabling a local malicious app to run arbitrary code in kernel context. Affected product: Android devices using NVIDIA GPU drivers (Pixel C cited in Google's patch table). Impact is labeled Cri...

Privilege escalation

An elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the...