CVE-2016-2067: Google Android

High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days.

drivers/gpu/msm/kgsl.c in the MSM graphics driver (aka GPU driver) for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, mishandles the KGSL_MEMFLAGS_GPUREADONLY flag, which allows attackers to gain privileges by leveraging accidental read-write mappings, aka Qualcomm internal bug CR988993.

Affected products

• Google Android: up to and including 6.0.1
• Linux Linux Kernel: from 3.0, up to and including 3.19.8

Published 2016-07-11. Last modified 2026-06-17.