CVE-2016-10277: google inc. android
Vulnerability summary
CVE-2016-10277 is a high (CVSS 9.3) vulnerability in google inc. android. EPSS estimates a 9.76% chance of exploitation in the next 30 days, higher than 95.5% of scored vulnerabilities. 1 public exploit is recorded.
Public exploit (exploit-database, 01-09-2017)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 1 · Related 1Timeline
- 12-05-2017PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
An elevation of privilege vulnerability in the Motorola bootloader could enable a local malicious application to execute arbitrary code within the context of the bootloader. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-33840490.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
9.76%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
Increase +0.08 pp
From 9.68% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundMotorola Bootloader - Kernel Cmdline Injection Secure Boot and Device Locking Bypass
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, no authentication, user interaction (CVSS vector). Other conditions: not stated in public data.
Google inc.1 product
- androidKernel-3.10 | Kernel-3.18
Linux1 product
- linux_kernel3.10 | 3.18
2 vendors · 2 products