CVE-2016-10295

CVE-2016-10295 describes an information disclosure vulnerability in the Qualcomm LED driver affecting Android devices running Linux Kernel 3.18. A local malicious application could exploit this to access data beyond its authorized permissions. The vulnerability is rated Medium severity (CVSS 4.7) due to high attack complexity, requiring prior compromise of a privileged process, but could lead to high confidentiality impact. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.