CVE-2016-8396

MEDIUM

Android < 7.1.0 - Information Disclosure in MediaTek Video Driver

Title source: llm
STIX 2.1

Description

An information disclosure vulnerability in the MediaTek video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: N/A. Android ID: A-31249105.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/94712

Scores

CVSS v3 5.5
EPSS 0.0007
EPSS Percentile 21.9%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Details

CWE
CWE-200
Status published
Products (2)
google/android < 7.1.0
Google Inc./Android
Published Jan 12, 2017
Tracked Since Feb 18, 2026