CVE-2016-6737

High

Published: 25/11/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2016-6737 is a vulnerability in the Android kernel ION subsystem before 2016-11-05 that allows a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.

Risk Assessment

The risk to the organization is that a local application could gain full control over the device, potentially leading to data loss and the need to reflash the operating system.

Recommendation

It is recommended to update Android to a version after 2016-11-05 to mitigate this vulnerability and to monitor devices for malicious applications.

Other vulnerabilities in Android kernel ION subsystem

CVE-2016-6728High
CVE-2016-6728 is a vulnerability in the Android kernel ION subsystem before 2016-11-05 that allows a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as Critical due to the potential for permanent device compromise.

Original NVD description (English source)

An elevation of privilege vulnerability in the kernel ION subsystem in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of a local permanent device compromise, which may require reflashing the operating system to repair the device. Android ID: A-30928456.