CVE-2016-6725

EPSS 2.6%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 2.6%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

25 Nov 2016Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A remote code execution vulnerability in the Qualcomm crypto driver in Android before 2016-11-05 could enable a remote attacker to execute arbitrary code within the context of the kernel. This issue is rated as Critical due to the possibility of remote code execution in the context of the kernel. Android ID: A-30515053. References: Qualcomm QC-CR#1050970.

Affected products

Google Inc. · Android

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://source.android.com/security/bulletin/2016-11-01.html http://www.securityfocus.com/bid/94182