CVE-2016-10398

CVE-2016-10398 describes an authentication bypass vulnerability in Android 6.0, specifically affecting devices like the LG Nexus 5X. Attackers with root and physical access can exploit a weak challenge protecting cryptographic authentication tokens (AuthTokens) used by the Trusted Execution Environment (TEE). This allows them to replay previously captured responses, bypassing authentication and enabling unauthorized use of the TEE, impacting all apps relying on authentication-gated cryptography. The vulnerability has a CVSS score of 6.2 (Medium), indicating a high impact on confidentiality, integrity, and availability, but requires physical access and high privileges for exploitation. There is no known active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.