CVE-2016-3843 PUBLISHED

Android before 2016-08-05 does not properly restrict code execution in a kernel context, which allows attackers to gain privileges via a crafted application, as demonstrated by the kernel performance subsystem and the Qualcomm performance component, aka Android internal bugs 28086229 and 29119870 and Qualcomm internal bug CR1011071.

EPSS 0.06% · 18.6th percentile

Risk Scores

EPSS Score
0.06%
18.6th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSandroid0, 20150818-1500-0ubuntu2, 20150818-1500-0ubuntu3

Timeline

References

Open in Interactive Console →