CVE-2016-6746

MEDIUM

Google Android < 7.0 - Information Disclosure

Title source: rule

Description

An information disclosure vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Android ID: A-30955105. References: NVIDIA N-CVE-2016-6746.

References (2)

Scores

CVSS v3 5.5
EPSS 0.0007
EPSS Percentile 21.8%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Classification

CWE
CWE-200
Status published

Affected Products (2)

google/android < 7.0
Google Inc./Android < Kernel-3.18

Timeline

Published Nov 25, 2016
Tracked Since Feb 18, 2026