CVE-2016-2435

CVE-2016-2435 describes a privilege escalation vulnerability in the NVIDIA video driver on Google Nexus 9 devices running Android versions prior to May 1, 2016. A malicious application could exploit this flaw to gain elevated privileges on the affected device. With a CVSS score of 7.8 (High), this vulnerability allows an attacker to achieve high confidentiality, integrity, and availability impacts through a low-complexity attack requiring user interaction. While there is no known public exploit code or Metasploit module, the vulnerability has received some community discussion and media coverage, indicating awareness within the security community.