Google Android Motorola Bootloader CVE-2016-10277 Privilege Escalation Vulnerability

Bugtraq ID:	98149
Class:	Unknown
CVE:	CVE-2016-10277
Remote:	Yes
Local:	No
Published:	May 01 2017 12:00AM
Updated:	Jun 05 2017 02:02PM
Credit:	The vendor reported this issue.
Vulnerable:	Google Nexus 6 Google Android 0
Not Vulnerable:

Google Android Motorola Bootloader CVE-2016-10277 Privilege Escalation Vulnerability

Google Android is prone to a privilege escalation vulnerability.

Attackers can exploit this issue to execute arbitrary code with elevated privileges within the context of the bootloader.

This issue is being tracked by Android Bug ID A-33840490.

Google Android Motorola Bootloader CVE-2016-10277 Privilege Escalation Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Google Android Motorola Bootloader CVE-2016-10277 Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Google Android Motorola Bootloader CVE-2016-10277 Privilege Escalation Vulnerability

References:

• Android Homepage (Google)
  
• Android Security Bulletin�??May 2017 (Android)
  
• initroot: Bypassing Nexus 6 Secure Boot through Kernel Command-line Injection (alephsecurity)