CVE-2016-6750: Infoleak
An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Android ID: A-30312054. References: Qualcomm QC-CR#1052825.
Affected Software
Event History
Frequently Asked Questions
What must an attacker do to exploit this issue?
Exploitation requires a local malicious application and user interaction. The issue also first requires compromise of a privileged process.
What data could be exposed?
A successful exploit could allow access to data outside the malicious application's assigned permission levels. The available data does not identify specific data types or affected permissions.
Which Android components are implicated?
The affected Qualcomm components include the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver.
What should organizations do if they are affected?
Apply the available patch. The issue affects Android versions before 2016-11-05 according to the provided information.