CVE-2016-6729

High

Published: 25/11/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2016-6729 is a vulnerability in the Qualcomm bootloader in Android before 2016-11-05 that allows a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.

Risk Assessment

Organizations may face permanent device damage, requiring reflashing of the operating system. Malicious applications could exploit this vulnerability to take control of devices.

Recommendation

It is recommended to update Android to a version after 2016-11-05 to mitigate this vulnerability. Additionally, monitor and restrict the installation of applications from unknown sources.

Other vulnerabilities in Qualcomm bootloader in Android

CVE-2016-3850High
Integer overflow in app/aboot/aboot.c in the Qualcomm bootloader in Android before 2016-08-05 on Nexus 5, 5X, 6P, and 7 (2013) devices allows attackers to gain privileges via a crafted header field in a boot image.

Original NVD description (English source)

An elevation of privilege vulnerability in the Qualcomm bootloader in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Android ID: A-30977990. References: Qualcomm QC-CR#977684.