CVE-2016-6751: Infoleak
An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Android ID: A-30902162. References: Qualcomm QC-CR#1062271.
Affected Software
Event History
Frequently Asked Questions
What does an attacker need before this issue can be exploited?
Exploitation requires a local malicious application and user interaction. The issue also first requires compromise of a privileged process, which limits practical exploitation.
What systems are affected?
The affected product is Google Android before 2016-11-05, involving Qualcomm GPU, power, SMSM Point-to-Point, and sound driver components.
What is the security impact if exploitation succeeds?
A successful exploit can allow a local malicious application to read data outside of its assigned permission levels. The stated impact is confidentiality loss; integrity and availability impacts are not listed.