CVE-2016-6771

MEDIUM

Google Android - Improper Access Control

Title source: rule

Description

An elevation of privilege vulnerability in Telephony could enable a local malicious application to access system functions beyond its access level. This issue is rated as Moderate because it is a local bypass of restrictions on a constrained process. Product: Android. Versions: 6.0, 6.0.1, 7.0. Android ID: A-31566390.

References (2)

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/94706

[Vendor Advisory] https://source.android.com/security/bulletin/2016-12-01.html

Scores

CVSS v3 5.3

EPSS 0.0004

EPSS Percentile 12.2%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Classification

CWE

CWE-284

Status published

Affected Products (6)

google/android

Google Inc./Android < Android-6.0

Google Inc./Android < Android-6.0.1

Google Inc./Android < Android-7.0

Timeline

Published Jan 12, 2017

Tracked Since Feb 18, 2026