Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
4.7
CVE-2016-8408: Linux kernel allows local app to read other data
CVE-2016-8408 · published 9 years ago
Summary
The Linux kernel contains a flaw that can let a malicious program running on an Android device read information it should not have access to. This requires the attacker to first gain some level of system privilege, but could lead to exposure of sensitive data. Apply the latest security updates from your device manufacturer or Linux distribution to fix the issue.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| linux | linux_kernel |
3.10 cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:* |
Original advisory text
An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate becaus...
An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31496571. References: N-CVE-2016-8408.
References
- http://www.securityfocus.com/bid/94691 Third Party Advisory VDB Entry
- https://source.android.com/security/bulletin/2016-12-01.html VDB Entry
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-200Information Exposure
Timeline
Published12 Jan 2017
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2016-8408 · NVD
Track software like this
Free during beta