CVE-2016-6725 in Android

Résumé

par MITRE

A remote code execution vulnerability in the Qualcomm crypto driver in Android before 2016-11-05 could enable a remote attacker to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of remote code execution in the context of the kernel. Android ID: A-30515053. References: Qualcomm QC-CR#1050970.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Réserver: 11/08/2016
• Divulgation: 25/11/2016
• Modérer: accepté
• Entrée: VDB-93463
• CPE: prêt
• CWE: CWE-284 (confirmé)
• CVSS: 9.8 (NVD)
• EPSS: 0.02600
• KEV: non
• Activités: très faible
• Secteur: Finance, Police, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-6725
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-6725
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-6725/