CVE-2016-6752: Infoleak
An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Android ID: A-31498159. References: Qualcomm QC-CR#987051.
Affected Software
Event History
Frequently Asked Questions
What must an attacker do before they can access protected data?
The issue requires a local malicious application and user interaction, and exploitation first requires compromising a privileged process. It is therefore not described as directly exploitable by an unprivileged app alone.
Which Android components are implicated?
The affected Qualcomm components include the GPU driver, power driver, SMSM Point-to-Point driver, and sound driver.
What is the remediation status?
A patch is available. The issue affects Android versions before 2016-11-05.