CVE-2016-10237: Google Android

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

If shared content protection memory were passed as the secure camera memory buffer by the HLOS to a trusted application (TA) in all Android releases from CAF using the Linux kernel, the TA would not detect an issue and it would be treated as secure memory.

Affected products

  • Google Android: affected versions not specified

Published 2017-05-16. Last modified 2026-06-17.