CVE-2016-3857

The kernel in Android before 2016-08-05 on Nexus 7 (2013) devices allows attackers to gain...

7.8 HighFix available

CVE-2016-3857 is a high vulnerability (CVSS 7.8) in Google Android, published August 5, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.58%, the 47th percentile. Fixed in linux 4.7.2-1.

The kernel in Android before 2016-08-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 28522518.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

0.58%Down 0.3 points since Feb 4, 2022

What each source reports

NVD Score used 7.8

The kernel in Android before 2016-08-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 28522518.

Record: CVE-2016-3857
CVSS 3.0: 7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0: 9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-264
Updated: 2026-11-02

CVE List No score

The kernel in Android before 2016-08-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 28522518.

Record: CVE-2016-3857
Updated: 2026-11-02

EUVDEUVD-2016-4870 No score

The kernel in Android before 2016-08-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 28522518.

Record: EUVD-2016-4870
Updated: 2026-11-03

GitHub AdvisoriesGHSA-vqp6-fq4v-xhc9 7.8

The kernel in Android before 2016-08-05 on Nexus 7 (2013) devices allows attackers to gain...

The kernel in Android before 2016-08-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 28522518.

Record: GHSA-vqp6-fq4v-xhc9
CVSS 3.0: 7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSV 7.8

The kernel in Android before 2016-08-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 28522518.

Record: CVE-2016-3857
CVSS 3.0: 7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2016-3857 7.8

The kernel in Android before 2016-08-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 28522518.

Record: DEBIAN-CVE-2016-3857
CVSS 3.0: 7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2016-3857 7.8

The kernel in Android before 2016-08-05 on Nexus 7 (2013) devices allows attackers to gain privileges via a crafted application, aka internal bug 28522518.

Record: UBUNTU-CVE-2016-3857
CVSS 3.0: 7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

Affected products

google android

Affected packages

Affected packages
Package	Affected	Fixed
`linux` Debian:12	before 4.7.2-1	4.7.2-1
`linux` Debian:13	before 4.7.2-1	4.7.2-1
`linux` Debian:14	before 4.7.2-1	4.7.2-1
`linux` Debian:7	before 3.2.81-2, plus listed versions 3.2.41-23.2.41-2+deb7u13.2.41-2+deb7u23.2.41-2+deb7u2~bpo60+13.2.46-1 Show 45 moreShow less 3.2.46-1+deb7u13.2.46-1+deb7u1~bpo60+13.2.46-1~bpo60+13.2.51-13.2.51-1~bpo60+13.2.53-13.2.53-23.2.54-13.2.54-23.2.54-2~bpo60+13.2.57-13.2.57-23.2.57-33.2.57-3+deb7u13.2.57-3+deb7u23.2.57-3+deb7u2~bpo60+13.2.60-13.2.60-1+deb7u13.2.60-1+deb7u23.2.60-1+deb7u33.2.60-1+deb7u3~bpo60+13.2.63-13.2.63-23.2.63-2+deb7u13.2.63-2+deb7u1~bpo60+13.2.63-2+deb7u23.2.63-2+deb7u2~bpo60+13.2.65-13.2.65-1+deb7u13.2.65-1+deb7u1~bpo60+13.2.65-1+deb7u23.2.65-1+deb7u2~bpo60+13.2.68-13.2.68-1+deb7u13.2.68-1+deb7u1~bpo60+13.2.68-1+deb7u23.2.68-1+deb7u2~bpo60+13.2.68-1+deb7u33.2.68-1+deb7u3~bpo60+13.2.68-1+deb7u43.2.68-1+deb7u4~bpo60+13.2.68-1+deb7u53.2.68-1+deb7u63.2.68-1+deb7u6~bpo60+13.2.71-1	3.2.81-2

History

History
When	Changed	Sources
2026-11-03	affected
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

This page doesn't list everything

Left out here: 9 versions. The JSON record has them.