CVE-2016-6710

MEDIUM

Android 5.0-5.0.1, 5.1-5.1.0, 6.0-6.0.0, 6.0.1-6.0.0, 7.0-7.0.0 - Information Disclosure via Download Manager

Title source: llm
STIX 2.1

Description

An information disclosure vulnerability in the download manager in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not have access to. Android ID: A-30537115.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/94170

Scores

CVSS v3 5.5
EPSS 0.0006
EPSS Percentile 19.6%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Details

CWE
CWE-200
Status published
Products (7)
google/android 7.0
google/android 5.0 - 5.0.2
Google Inc./Android Android-5.0.2
Google Inc./Android Android-5.1.1
Google Inc./Android Android-6.0
Google Inc./Android Android-6.0.1
Google Inc./Android Android-7.0
Published Nov 25, 2016
Tracked Since Feb 18, 2026