CVE-2016-6703 — Improper Access Control in Google Android

CWE-284 — Improper Access Control5 documents5 sources
Severity
7.8HIGHNVD
EPSS
0.3%
top 49.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Google AndroidGoogle INC Android
Timeline
PublishedNov 25
Latest updateMay 17

Description

A remote code execution vulnerability in an Android runtime library in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-01 could enable an attacker using a specially crafted payload to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses the Android runtime. Android ID: A-30765246.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages3 packages

▶NVDgoogle/android6.0.1+21
▶CVEListV5google_inc/android5 versions+4

🔴Vulnerability Details

2
GHSA
GHSA-xvc4-f349-6428: A remote code execution vulnerability in an Android runtime library in Android 4↗2022-05-17
▶
OSV
CVE-2016-6703: A remote code execution vulnerability in an Android runtime library in Android 4↗2016-11-25
▶

📋Vendor Advisories

1
Android
CVE-2016-6703: Android Security Bulletin 2016-11-01 CVE: CVE-2016-6703 Severity: HIGH Affected AOSP versions: 4↗2016-11-01
▶

💬Community

1
Bugzilla
CVE-2012-6703 kernel: Integer overflow in compress_core↗2016-06-29
▶