CVE-2016-2445

HIGH

Google Android < 6.0.1 - Access Control

Title source: rule

Description

The NVIDIA media driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 27253079.

Exploits (1)

github WORKING POC 682 stars
by ScottyBauer · cpoc
https://github.com/ScottyBauer/Android_Kernel_CVE_POCs/tree/master/CVE-2016-2445.c

Scores

CVSS v3 7.0
EPSS 0.0004
EPSS Percentile 13.1%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-264
Status published
Products (1)
google/android < 6.0.1
Published May 09, 2016
Tracked Since Feb 18, 2026