CVE-2016-0805
HIGHAndroid <4.4.4, <5.1.1 LMY49G, <2016-02-01 - Privilege Escalation
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2016-0805. PoCs published by codecat007.
AI-analyzed exploit summary The PoC demonstrates CVE-2016-0805, a local privilege escalation vulnerability in the Android kernel's perf_event subsystem. It triggers a crash by opening a perf_event with a specific raw event type (0x21001) that leads to an out-of-bounds access.
Description
The performance event manager for Qualcomm ARM processors in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows attackers to gain privileges via a crafted application, aka internal bug 25773204.
Exploits (1)
The PoC demonstrates CVE-2016-0805, a local privilege escalation vulnerability in the Android kernel's perf_event subsystem. It triggers a crash by opening a perf_event with a specific raw event type (0x21001) that leads to an out-of-bounds access.
References (1)
Scores
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H