The Synaptics touchscreen driver in Android before 2016-10-05 on Nexus 6P and Android One devices allows attackers to gain privileges via a crafted application, aka internal bug 30141991.
No PoCs from references.
- https://github.com/jiayy/android_vuln_poc-exp