CVE-2016-6738: Critical severity Google Android vulnerability
An elevation of privilege vulnerability in the Qualcomm crypto engine driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Android ID: A-30034511. References: Qualcomm QC-CR#1050538.
Affected Software
Event History
Frequently Asked Questions
What must an attacker achieve before exploiting this issue?
The issue first requires compromise of a privileged process. It is locally exploitable and involves user interaction, according to the supplied CVSS vector.
What is the potential impact after successful exploitation?
A malicious local application could execute arbitrary code in the kernel context, resulting in high confidentiality, integrity, and availability impact.
Which Android versions are identified as affected?
The vulnerability affects Android releases before 2016-11-05. The provided data does not identify specific Android version numbers or device models.