The MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a crafted application, aka Android internal bug 30019362 and MediaTek internal bug ALPS02829384.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3928
Reference (s):
- BID:93308
- URL: http://www.securityfocus.com/bid/93308
- http://source.android.com/security/bulletin/2016-10-01.html