PT-2016-1723

CVE-2016-2409

Published

2016-04-18

Updated

2016-04-21

Description by

CVSS 2.0

9.3

High

MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-04-01

Description The issue is related to a Texas Instruments haptic kernel driver in Android, which has inadequate access control. This allows attackers to gain privileges via a crafted application that leverages control over a service that can call this driver.

Recommendations For Android versions prior to 2016-04-01, update the system to a version released after 2016-04-01 to resolve the issue.

Exploitability

Fix

Researchers

Vendors

Affected products

Weakness enumeration

CWE-264