CVE-2016-6740
HighSummary
CVE-2016-6740 is a vulnerability in the Qualcomm camera driver in Android before 2016-11-05 that allows a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
Risk Assessment
The risk to the organization involves the potential execution of malicious code in the system kernel, which could lead to full control over the device. The high risk associated with compromising privileged processes may result in serious security breaches.
Recommendation
It is recommended to update Android to a version after 2016-11-05 to mitigate this vulnerability. Additionally, monitoring and restricting access to privileged applications can help minimize risk.
Other vulnerabilities in Sterownik kamery Qualcomm w systemie Android
See all- CVE-2017-0458High
CVE-2017-0458 is a privilege escalation vulnerability in the Qualcomm camera driver that could allow a local malicious application to execute arbitrary code within the kernel context. This issue is rated as High because it first requires compromising a privileged process.
- CVE-2016-8417High
CVE-2016-8417 is a vulnerability in the Qualcomm camera driver that allows a local malicious application to execute arbitrary code within the kernel context. This issue is rated as Moderate because it requires compromising a privileged process and is mitigated by current platform configurations.
- CVE-2016-6741High
CVE-2016-6741 is a vulnerability in the Qualcomm camera driver in Android before 2016-11-05, allowing a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as High as it requires compromising a privileged process first.
- CVE-2016-6739High
CVE-2016-6739 is a vulnerability in the Qualcomm camera driver in Android before 2016-11-05, allowing a local malicious application to gain elevated privileges and execute arbitrary code within the kernel context. This issue is rated as High because it requires compromising a privileged process first.
Original NVD description (English source)
An elevation of privilege vulnerability in the Qualcomm camera driver in Android before 2016-11-05 could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Android ID: A-30143904. References: Qualcomm QC-CR#1056307.