CVE-2016-6715

An elevation of privilege vulnerability in the Framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could allow a local malicious application to record audio without the user's permission. This issue is rated as Moderate because it is a local bypass of user interaction requirements (access to functionality that would normally require either user initiation or user permission.) Android ID: A-29833954.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.5 MEDIUM
LOCAL
LOW
NONE
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
google_androidCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 12%
VendorProductVersion
googleandroid
4.0 ≤
𝑥
< 4.4.4
googleandroid
5.0 ≤
𝑥
< 5.0.2
googleandroid
5.1 ≤
𝑥
< 5.1.1
googleandroid
6.0 ≤
𝑥
≤ 6.0.1
googleandroid
7.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
android
bionic
dne
artful
dne
zesty
ignored
yakkety
ignored
xenial
ignored
trusty
dne
precise
dne
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/94173
https://source.android.com/security/bulletin/2016-11-01.html
http://www.securityfocus.com/bid/94173
https://source.android.com/security/bulletin/2016-11-01.html