CVE-2016-6674

High

Published: 10/10/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The system_server in Android before 2016-10-05 on Nexus devices has a vulnerability that allows attackers to gain privileges via a crafted application.

Risk Assessment

This vulnerability could lead to unauthorized access to the system, posing a serious threat to user data security.

Recommendation

It is recommended to update the Android system to a version after 2016-10-05 to mitigate this vulnerability.

Other vulnerabilities in system_server

CVE-2016-6707High
CVE-2016-6707 is a vulnerability in System Server in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 that allows a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High due to the potential for gaining local access to elevated capabilities not normally accessible to third-party applications.

Original NVD description (English source)

system_server in Android before 2016-10-05 on Nexus devices allows attackers to gain privileges via a crafted application, aka internal bug 30445380.