The Synaptics touchscreen driver in Android before 2016-09-05 on Nexus 5X and 9 devices allows attackers to gain privileges via a crafted application, aka internal bug 28799389.
No PoCs from references.
- https://github.com/jiayy/android_vuln_poc-exp