CVE-2016-8437

Improper input validation in Access Control APIs. Access control API may return memory range checking incorrectly. Product: Android. Versions: Kernel 3.18. Android ID: A-31623057. References: QC-CR#1009695.

• CWE-20

• http://www.securityfocus.com/bid/95227
• https://source.android.com/security/bulletin/2017-01-01.htmlVendor Advisory
• http://www.securityfocus.com/bid/95227
• https://source.android.com/security/bulletin/2017-01-01.htmlVendor Advisory

Published

Jan 12, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-8431An elevation of privilege vulnerability in the NVIDIA GPU dr…
• CVE-2016-8432An elevation of privilege vulnerability in the NVIDIA GPU dr…
• CVE-2016-8433An elevation of privilege vulnerability in the MediaTek driv…
• CVE-2016-8434An elevation of privilege vulnerability in the Qualcomm GPU …
• CVE-2016-8435An elevation of privilege vulnerability in the NVIDIA GPU dr…
• CVE-2016-8436An elevation of privilege vulnerability in the Qualcomm vide…
• CVE-2016-8438Integer overflow leading to a TOCTOU condition in hypervisor…
• CVE-2016-8439Possible buffer overflow in trust zone access control API. B…
• CVE-2016-8440Possible buffer overflow in SMMU system call. Improper input…
• CVE-2016-8441Possible buffer overflow in the hypervisor. Inappropriate us…
• CVE-2016-8442Possible unauthorized memory access in the hypervisor. Lack …
• CVE-2016-8443Possible unauthorized memory access in the hypervisor. Incor…