CVE-2016-6746: Infoleak
An information disclosure vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Android ID: A-30955105. References: NVIDIA N-CVE-2016-6746.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Android devices using the NVIDIA GPU driver are exposed if they have not received the fix available before 2016-11-05. Exploitation requires a malicious application to run locally on the device.
What access does an attacker need?
The CVSS vector indicates local attack access, no privileges, and user interaction. A malicious app could access sensitive data outside its assigned permission levels after the required user interaction.
What is the impact of successful exploitation?
The documented impact is disclosure of sensitive data outside the malicious application's permission boundaries. The CVSS vector identifies confidentiality impact as high, with no integrity or availability impact.