CVE-2016-6704
CVE-2016-6704
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An elevation of privilege vulnerability in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Android ID: A-30229821.
CVSS 7.8 · High · EPSS 0.9%
- Published
- Updated
Stack: system
Affected products and versions
android
- Versions
- Android-4.4.4: Affected
- Android-5.0.2: Affected
- Android-5.1.1: Affected
- Android-6.0: Affected
- Android-6.0.1: Affected
- Android-7.0: Affected
No fix published
android Ubuntu:16.04:LTS
- Versions
- 20150818-1500-0ubuntu2
- 20150818-1500-0ubuntu3
- 20160307-0742-0ubuntu3
- 20160330-0939-0ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published