← Back

CVE-2016-6770

nvd nist
Published: Jan 12, 2017Modified: May 6, 2026

JSON object

Loading...
3.3
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Exploitability: 1.8 / Impact: 1.4
Source: NVD

Description

An elevation of privilege vulnerability in the Framework API could enable a local malicious application to access system functions beyond its access level. This issue is rated as Moderate because it is a local bypass of restrictions on a constrained process. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0. Android ID: A-30202228.

Affected (26)

Products: Google: Android
Google
1 product
Android
Configuration A
26 vulnerable
Vulnerable SoftwareAffected Versions
Google
Android
Version 4.0.1
Android
Version 4.0.2
Android
Version 4.0.3
Android
Version 4.0.4
Android
Version 4.0
Android
Version 4.1.2
Android
Version 4.1
Android
Version 4.2.1
Android
Version 4.2.2
Android
Version 4.2
Android
Version 4.3.1
Android
Version 4.3
Android
Version 4.4.1
Android
Version 4.4.2
Android
Version 4.4.3
Android
Version 4.4.4
Android
Version 4.4
Android
Version 5.0.1
Android
Version 5.0.2
Android
Version 5.0
Android
Version 5.1.0
Android
Version 5.1.1
Android
Version 5.1
Android
Version 6.0.1
Android
Version 6.0
Android
Version 7.0

Related CWEs

CWE-284
Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (4)

Source: security@android.com
Third Party AdvisoryVDB Entry
Source: security@android.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.