Skip to content
OpenAdvisories
Unscored CVE-2016-6743 EUVD-2016-7646GHSA-pw8f-5vxw-hw2c

An elevation of privilege vulnerability in the Synaptics touchscreen driver in Android before 2016-11-05 could enable a local malicious app…

Published Nov 25, 2016 · Updated Aug 6, 2024 · Assigned by google_android

Description

An elevation of privilege vulnerability in the Synaptics touchscreen driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Android ID: A-30937462.

Affected products

VendorProductAffectedFixed
— Android Kernel-3.10 Android Kernel-3.10 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS android No fix yet —

References