CVE-2016-6746

MEDIUM

Android NVIDIA GPU Driver - Information Disclosure via Local Application

Title source: llm
STIX 2.1

Description

An information disclosure vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Android ID: A-30955105. References: NVIDIA N-CVE-2016-6746.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/94209

Scores

CVSS v3 5.5
EPSS 0.0007
EPSS Percentile 21.9%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Details

CWE
CWE-200
Status published
Products (2)
google/android < 7.0
Google Inc./Android Kernel-3.18
Published Nov 25, 2016
Tracked Since Feb 18, 2026