CVE-2016-8437: Linux Kernel

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

Improper input validation in Access Control APIs. Access control API may return memory range checking incorrectly. Product: Android. Versions: Kernel 3.18. Android ID: A-31623057. References: QC-CR#1009695.

Affected products

• Linux Linux Kernel: version 3.18 only

Published 2017-01-12. Last modified 2026-06-17.