CVE-2016-6728

High

Published: 25/11/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2016-6728 is a vulnerability in the Android kernel ION subsystem before 2016-11-05 that allows a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.

Risk Assessment

Organizations may face permanent device damage, requiring reflashing of the operating system for repair. Malicious applications could exploit this vulnerability to take control of devices.

Recommendation

It is recommended to update Android to a version after 2016-11-05 to mitigate this vulnerability. Additionally, monitoring and restricting the installation of applications from unknown sources is advised.

Other vulnerabilities in Android kernel ION subsystem

CVE-2016-6737High
CVE-2016-6737 is a vulnerability in the Android kernel ION subsystem before 2016-11-05 that allows a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.

Original NVD description (English source)

An elevation of privilege vulnerability in the kernel ION subsystem in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Android ID: A-30400942.