CVE-2016-6758
HighSummary
A vulnerability in Qualcomm media codecs allows a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to third-party applications.
Risk Assessment
The risk to the organization involves the potential for malicious software to gain access to critical system resources, which could lead to serious security breaches.
Recommendation
It is recommended to update the Android system to the latest version to minimize the risk associated with this vulnerability and to monitor applications installed on devices.
Other vulnerabilities in Qualcomm media codecs
See all- CVE-2016-6760High
CVE-2016-6760 is a privilege escalation vulnerability in Qualcomm media codecs that allows a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High due to the potential for gaining local access to elevated capabilities not normally accessible to third-party applications.
- CVE-2016-6759High
CVE-2016-6759 is a privilege escalation vulnerability in Qualcomm media codecs that allows a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High due to the potential for gaining local access to elevated capabilities not normally accessible to third-party applications.
Original NVD description (English source)
An elevation of privilege vulnerability in Qualcomm media codecs could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-30148882. References: QC-CR#1071731.