CVE-2016-3846

CVE-2016-3846 is a privilege escalation vulnerability affecting the Serial Peripheral Interface driver in Android on Nexus 5X and 6P devices before the 2016-08-05 security update. An attacker could exploit this by convincing a user to install a crafted application. With a CVSS score of 7.0 (HIGH), this vulnerability has a local attack vector, high attack complexity, and could lead to high confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.