CVE-2016-8402
An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31495231.
- Score
- CVSS 3.0 4.7 Medium
- Status
- Modified - security@android.com
- Published
- 2017-01-12
- Last modified
- 2024-08-06
- Weaknesses
- CWE-200
Affected products
References
- http://www.securityfocus.com/bid/94686
- https://source.android.com/security/bulletin/2016-12-01.html