CVE-2016-2435

HIGH

Android < 6.0.1 - Privilege Escalation via NVIDIA Video Driver

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2016-2435. PoCs published by codecat007.

AI-analyzed exploit summary This is a functional local privilege escalation exploit for CVE-2016-2435 targeting the nvhost-gpu vulnerability on Nexus 9 (MMB29R). It leverages memory corruption to achieve arbitrary kernel read/write, then modifies task credentials to gain root.

Description

The NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27297988.

Exploits (1)

github WORKING POC 8 stars

by codecat007 · cpoc

https://github.com/codecat007/cvehub/tree/main/android/kernel/EXP-CVE-2016-2435

View Code ZIP pw:eip

This is a functional local privilege escalation exploit for CVE-2016-2435 targeting the nvhost-gpu vulnerability on Nexus 9 (MMB29R). It leverages memory corruption to achieve arbitrary kernel read/write, then modifies task credentials to gain root.

Classification

Working Poc 95%

Attack Type

Lpe

Complexity

Complex

Reliability

Reliable

Target: Android kernel on Nexus 9 (6.0.1 MMB29R)

No auth needed

Prerequisites: Nexus 9 device with vulnerable kernel version · Access to /dev/nvmap and /dev/nvhost-gpu

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation T1548 - Abuse Elevation Control Mechanism

devstral-2 · analyzed Feb 27, 2026 Full analysis →

References (1)

Core 1

Core References

Patch, Vendor Advisory x_refsource_confirm

http://source.android.com/security/bulletin/2016-05-01.html

Scores

CVSS v3 7.8

EPSS 0.0006

EPSS Percentile 19.6%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-264

Status published

Products (1)

google/android < 6.0.1

Published May 09, 2016

Tracked Since Feb 18, 2026