4.7med
CVE-2016-8395
A denial of service vulnerability in the NVIDIA camera driver could enable an attacker to cause a local permanent denial of service, which…
Published 9 y ago · modified 4 mo ago · JSON
CVSS
4.7
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.8%
percentile 56%
Public exploits
0
none known
Summary
A denial of service vulnerability in the NVIDIA camera driver could enable an attacker to cause a local permanent denial of service, which may require reflashing the operating system to repair the device. This issue is rated as High due to the possibility of local permanent denial of service. Product: Android. Versions: Kernel-3.10. Android ID: A-31403040. References: N-CVE-2016-8395.
Exploit prediction (EPSS)
0.78% probability of exploitation in the next 30 days, higher than 56% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 4.7 | CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H |
| NVD | 2.0 | 7.1 | AV:N/AC:M/Au:N/C:N/I:N/A:C |
Affected products
- Google Inc. Android
Classification
- Technology feeds
- Linux kernel (RSS, critical only)
References
- source.android.com /security/bulletin/2016-12-01.html · x_refsource_CONFIRM, x_transferred
- securityfocus.com /bid/94710 · vdb-entry, x_refsource_BID, x_transferred
- nvidia.custhelp.com /app/answers/detail/a_id/4561 · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2016-8395
- NVD: CVE-2016-8395
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.