CVE-2016-6706
HighSummary
CVE-2016-6706 is a vulnerability in libstagefright in Mediaserver in Android 7.0 before 2016-11-01 that allows a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High due to the potential for gaining local access to elevated capabilities not normally accessible to third-party applications.
Risk Assessment
Organizations may be at risk of malicious applications gaining access to sensitive data or system functions, potentially leading to serious security breaches.
Recommendation
It is recommended to update Android to a version after 2016-11-01 to mitigate this vulnerability and to monitor installed applications for potential threats.
Other vulnerabilities in libstagefright, Mediaserver
See all- CVE-2017-0596High
A vulnerability in libstagefright in Mediaserver allows a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application.
- CVE-2017-0595High
A vulnerability in libstagefright in Mediaserver could allow a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities that are not normally accessible to third-party applications.
- CVE-2017-0588High
A remote code execution vulnerability in libstagefright in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.
Original NVD description (English source)
An elevation of privilege vulnerability in libstagefright in Mediaserver in Android 7.0 before 2016-11-01 could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Android ID: A-31385713.