CVE-2016-6748: Infoleak
An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Android ID: A-30076504. References: Qualcomm QC-CR#987018.
Affected Software
Event History
Frequently Asked Questions
What must an attacker do before this issue can be exploited?
The issue requires a local malicious application and user interaction, but exploitation first requires compromise of a privileged process. It is therefore not described as remotely exploitable from the network.
What impact can successful exploitation have?
A successful exploit could allow access to data outside the malicious application's assigned permission levels. The stated impact is confidentiality exposure; integrity and availability impacts are not listed.
Which Android components are involved?
The affected Qualcomm components include the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver.
How can I determine whether a device may be affected?
Devices running Android with the affected Qualcomm components before the 2016-11-05 security level may be affected. The supplied data does not identify specific device models or builds.