CVE-2016-6784: Critical severity Google Android vulnerability

Published Dec 5, 2016

Updated

An elevation of privilege vulnerability in the MediaTek driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android ID: A-31350755. References: MT-ALPS02961424.

Affected Software

2 affected components

Google Android=6.0.1

Google Android

Event History

Dec 5, 2016

CVE Published

via Android·12:00 AM

Jan 12, 2017

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

DescriptionWeakness

Data Sourced

via NVD·03:59 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2016-6784?

CVE-2016-6784 is rated as High due to its potential for elevation of privilege within the kernel.

How do I fix CVE-2016-6784?

To mitigate CVE-2016-6784, ensure your device is updated with the latest security patches provided by the manufacturer.

Which versions of Android are affected by CVE-2016-6784?

CVE-2016-6784 specifically affects Android version 6.0.1.

What type of vulnerability is CVE-2016-6784?

CVE-2016-6784 is an elevation of privilege vulnerability in the MediaTek driver.

Can malicious applications exploit CVE-2016-6784?

Yes, a local malicious application can exploit CVE-2016-6784 to execute arbitrary code in the kernel's context.