CVE-2016-6715
CVE-2016-6715
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An elevation of privilege vulnerability in the Framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could allow a local malicious application to record audio without the user's permission. This issue is rated as Moderate because it is a local bypass of user interaction requirements (access to functionality that would normally require either user initiation or user permission.) Android ID: A-29833954.
CVSS 5.5 · Medium · EPSS 0.3%
- Published
- Updated
Stack: system
Affected products and versions
android
- Versions
- Android-4.4.4: Affected
- Android-5.0.2: Affected
- Android-5.1.1: Affected
- Android-6.0: Affected
- Android-6.0.1: Affected
- Android-7.0: Affected
No fix published
android Ubuntu:16.04:LTS
- Versions
- 20150818-1500-0ubuntu2
- 20150818-1500-0ubuntu3
- 20160307-0742-0ubuntu3
- 20160330-0939-0ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published