CVE-2016-2453 is a high-severity privilege escalation vulnerability affecting the MediaTek Wi-Fi driver in Android One devices running Android versions prior to May 1, 2016. An attacker could exploit this flaw by tricking a user into installing a crafted application, gaining elevated privileges on the device. The vulnerability has a CVSSv3 score of 7.0, indicating high impact on confidentiality, integrity, and availability, with high attack complexity and user interaction required. There is no public exploit code available (Metasploit, Nuclei, ExploitDB), and it is not listed in CISA's KEV catalog, suggesting it is not actively exploited in the wild. Despite limited community discussion, it received media coverage upon disclosure.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:h:google:android_one:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.0 Bluesky, 0.1 Mastodon, and 0.0 GitHub mentions.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.