CVE-2016-6722: Infoleak
An information disclosure vulnerability in libstagefright in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Android ID: A-31091777.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-6722?
CVE-2016-6722 has a high severity rating due to its potential for information disclosure by malicious applications.
How do I fix CVE-2016-6722?
To fix CVE-2016-6722, update your Android device to a version equal to or greater than 4.4.4, 5.0.2, 5.1.1, or any version after November 1, 2016 for 6.x and 7.0.
Who is affected by CVE-2016-6722?
CVE-2016-6722 affects Android devices running versions prior to 4.4.4, 5.0.2, 5.1.1, and 6.x and 7.0 before November 1, 2016.
What types of attacks can exploit CVE-2016-6722?
CVE-2016-6722 can be exploited by local malicious applications to access sensitive data outside their permissions.
Is there a workaround for CVE-2016-6722?
There is no specific workaround for CVE-2016-6722; the recommended action is to update to the latest Android version.