CVE-2016-5346
MEDIUMGoogle Android < 7.0 - Information Disclosure
Title source: ruleDescription
An Information Disclosure vulnerability exists in the Google Pixel/Pixel SL Qualcomm Avtimer Driver due to a NULL pointer dereference when processing an accept system call by the user process on AF_MSM_IPC sockets, which could let a local malicious user obtain sensitive information (Android Bug ID A-32551280).
Exploits (1)
github
WORKING POC
8 stars
by codecat007 · cpoc
https://github.com/codecat007/cvehub/tree/main/android/CVE-2016-5346
Scores
CVSS v3
5.5
EPSS
0.0010
EPSS Percentile
28.5%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Classification
CWE
CWE-200
Status
published
Affected Products (1)
google/android
< 7.0
Timeline
Published
Jan 08, 2020
Tracked Since
Feb 18, 2026