CVE-2016-6768: High severity Google Android vulnerability

Published Dec 5, 2016

Updated

A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses the Framesequence library. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0. Android ID: A-31631842.

Affected Software

10 affected components

Google Android=5.0

Google Android=5.0.1

Google Android=5.0.2

Google Android=5.1

Google Android=5.1.0

Google Android=5.1.1

Google Android=6.0

Google Android=6.0.1

Google Android=7.0

Google Android

Event History

Dec 5, 2016

CVE Published

via Android·12:00 AM

Data Sourced

via Android·12:00 AM

SeverityAffected Software

Jan 12, 2017

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2016-6768?

The severity of CVE-2016-6768 is rated as High due to the potential for remote code execution.

How do I fix CVE-2016-6768?

To fix CVE-2016-6768, update your device to the latest Android version that contains the security patch.

Which versions of Android are affected by CVE-2016-6768?

CVE-2016-6768 affects Android versions 5.0, 5.0.1, 5.0.2, 5.1, 5.1.0, 5.1.1, 6.0, 6.0.1, and 7.0.

What type of vulnerability is CVE-2016-6768?

CVE-2016-6768 is a remote code execution vulnerability in the Framesequence library.

What can attackers do with CVE-2016-6768?

Attackers can execute arbitrary code in the context of an unprivileged process using a specially crafted file.