CVE-2016-3850

CVE-2016-3850 describes an integer overflow vulnerability in the Qualcomm bootloader of Android devices, specifically affecting Nexus 5, 5X, 6P, and 7 (2013) models before the 2016-08-05 security update. This flaw allows a local attacker to gain elevated privileges by providing a specially crafted boot image header. With a CVSS score of 7.3 (High), the vulnerability presents a significant risk of complete compromise of confidentiality, integrity, and availability, though it requires user interaction (e.g., flashing a malicious boot image). There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.