AndroidVulnerabilities.org

CVE-2016-8438

(json)

• CVE numbers: CVE-2016-8438 [Bulletin-CVE-2016-8438]
• Coordinated disclosure?: unknown
• Categories: Vulnerabilities in Qualcomm components
• Details: Integer overflow leading to a TOCTOU condition in hypervisor PIL. An integer overflow exposes a race condition that may be used to bypass (Peripheral Image Loader) PIL authentication. Product: Android. Versions: Kernel 3.18. Android ID: A-31624565. References: QC-CR#1023638. [NIST-CVE-2016-8438]
• Discovered by: on: Unknown
• Reported on: 2017-01-01 [Bulletin-CVE-2016-8438]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: Qualcomm [Bulletin-CVE-2016-8438]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-30