CVE-2016-6717

Summary

An elevation of privilege vulnerability in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as Moderate because it first requires exploitation of a separate vulnerability. Android ID: A-31350239.

Affected Software

VendorProductVersion RangeStatus
Google Inc.AndroidAndroid-4.4.4affected
Google Inc.AndroidAndroid-5.0.2affected
Google Inc.AndroidAndroid-5.1.1affected
Google Inc.AndroidAndroid-6.0affected
Google Inc.AndroidAndroid-6.0.1affected
Google Inc.AndroidAndroid-7.0affected

Weaknesses

  • Elevation of privilege

ADP Enrichment

CVE Program Container

Additional References

References