CVE-2016-10289

CVE-2016-10289 is an elevation of privilege vulnerability in the Qualcomm crypto driver affecting Android devices running Linux Kernel versions 3.10 and 3.18. A local malicious application could exploit this to execute arbitrary code within the kernel context. The vulnerability has a CVSSv3 score of 7.0 (High), indicating a local attack vector with high attack complexity, requiring user interaction and prior compromise of a privileged process. Successful exploitation could lead to high confidentiality, integrity, and availability impacts. There is currently no evidence of active exploitation, nor is public exploit code available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal.