CVE-2016-6707

High

Published: 25/11/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2016-6707 is a vulnerability in System Server in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 that allows a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High due to the potential for gaining local access to elevated capabilities not normally accessible to third-party applications.

Risk Assessment

The risk to the organization is that malicious applications could gain access to sensitive system functions, potentially leading to data and system security breaches.

Recommendation

It is recommended to update Android to the latest version to mitigate this vulnerability and to monitor installed applications on devices for potential threats.

Other vulnerabilities in System Server

CVE-2016-6674High
The system_server in Android before 2016-10-05 on Nexus devices has a vulnerability that allows attackers to gain privileges via a crafted application.

Original NVD description (English source)

An elevation of privilege vulnerability in System Server in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Android ID: A-31350622.