CVE-2016-2436

CVE-2016-2436 describes a privilege escalation vulnerability in the NVIDIA video driver on Google Nexus 9 devices running Android versions prior to May 1, 2016. An attacker could exploit this by tricking a user into installing a crafted application, leading to high impact on confidentiality, integrity, and availability. With a CVSS v3 score of 7.8 (High), this vulnerability is considered severe, requiring user interaction but with low attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog, though it garnered limited media coverage and community discussion at the time of disclosure.