CVE-2016-2062

CVE-2016-2062 is an integer overflow vulnerability in the Adreno GPU driver (adreno_perfcounter_query_group function) of the Linux kernel 3.x, affecting Qualcomm-based Android devices, including Google Nexus 5X and 6P. An attacker with local user privileges can trigger this vulnerability via a crafted IOCTL_KGSL_PERFCOUNTER_QUERY ioctl call. This can lead to a denial of service (heap-based buffer overflow, incorrect memory allocation) and potentially other unspecified impacts, with a CVSS score of 7.8 (High). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or KEV listing, though it has received some community discussion and media coverage.