CVE-2016-6789

An elevation of privilege vulnerability in the NVIDIA libomx library (libnvomx) could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: Kernel-3.18. Android ID: A-31251973. References: N-CVE-2016-6789.

• CWE-284

• http://nvidia.custhelp.com/app/answers/detail/a_id/4561
• http://www.securityfocus.com/bid/94678Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2016-12-01.htmlVendor Advisory
• http://nvidia.custhelp.com/app/answers/detail/a_id/4561
• http://www.securityfocus.com/bid/94678Third Party Advisory, VDB Entry
• https://source.android.com/security/bulletin/2016-12-01.htmlVendor Advisory

Published

Jan 12, 2017

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-6783An elevation of privilege vulnerability in the MediaTek driv…
• CVE-2016-6784An elevation of privilege vulnerability in the MediaTek driv…
• CVE-2016-6785An elevation of privilege vulnerability in the MediaTek driv…
• CVE-2016-6786kernel/events/core.c in the performance subsystem in the Lin…7
• CVE-2016-6787kernel/events/core.c in the performance subsystem in the Lin…7
• CVE-2016-6788An elevation of privilege vulnerability in the MediaTek I2C …
• CVE-2016-6790An elevation of privilege vulnerability in the NVIDIA libomx…
• CVE-2016-6791An elevation of privilege vulnerability in the Qualcomm soun…
• CVE-2016-6793The DiskFileItem class in Apache Wicket 6.x before 6.25.0 an…
• CVE-2016-6794When a SecurityManager is configured, a web application's ab…5.3
• CVE-2016-6795In the Convention plugin in Apache Struts 2.3.x before 2.3.3…
• CVE-2016-6796A malicious web application running on Apache Tomcat 9.0.0.M…7.5