CVE-2016-8402

CVE-2016-8402 is an information disclosure vulnerability affecting the Android kernel (versions 3.10 and 3.18), specifically within components like ION, Binder, USB, and networking subsystems. This flaw allows a local malicious application to access data beyond its authorized permissions. Rated as Medium severity with a CVSS score of 4.7, its exploitation requires an attacker to first compromise a privileged process, making the attack complexity high. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.