CVE-2016-8434

An elevation of privilege vulnerability in the Qualcomm GPU driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10. Android ID: A-32125137. References: QC-CR#1081855.

• CWE-284

• http://www.securityfocus.com/bid/95257
• https://source.android.com/security/bulletin/2017-01-01.htmlVendor Advisory
• http://www.securityfocus.com/bid/95257
• https://source.android.com/security/bulletin/2017-01-01.htmlVendor Advisory

Published

Jan 12, 2017

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-8428An elevation of privilege vulnerability in the NVIDIA GPU dr…
• CVE-2016-8429An elevation of privilege vulnerability in the NVIDIA GPU dr…
• CVE-2016-8430An elevation of privilege vulnerability in the NVIDIA GPU dr…
• CVE-2016-8431An elevation of privilege vulnerability in the NVIDIA GPU dr…
• CVE-2016-8432An elevation of privilege vulnerability in the NVIDIA GPU dr…
• CVE-2016-8433An elevation of privilege vulnerability in the MediaTek driv…
• CVE-2016-8435An elevation of privilege vulnerability in the NVIDIA GPU dr…
• CVE-2016-8436An elevation of privilege vulnerability in the Qualcomm vide…
• CVE-2016-8437Improper input validation in Access Control APIs. Access con…
• CVE-2016-8438Integer overflow leading to a TOCTOU condition in hypervisor…
• CVE-2016-8439Possible buffer overflow in trust zone access control API. B…
• CVE-2016-8440Possible buffer overflow in SMMU system call. Improper input…