PT-2017-1236

CVE-2016-6755

·

Published

2017-01-12

·

Updated

2017-01-18

Description by

CVSS 2.0
7.6
High
MetricsAV:N/AC:H/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Android versions Kernel-3.10 through Kernel-3.18
Description The issue is related to an elevation of privilege vulnerability in the Qualcomm camera driver, which could allow a local malicious application to execute arbitrary code within the context of the kernel. This is rated as High because it first requires compromising a privileged process. The vulnerability is associated with inadequate access control in the Qualcomm camera driver.
Recommendations For Android versions Kernel-3.10 through Kernel-3.18, consider restricting access to the Qualcomm camera driver to minimize the risk of exploitation until a patch is available. As a temporary workaround, disabling the camera functionality may help mitigate the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾