CVE-2016-6746

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

An information disclosure vulnerability in the NVIDIA GPU driver in Android before 2016-11-05 could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Android ID: A-30955105. References: NVIDIA N-CVE-2016-6746.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Nov 25, 2016
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2016

CVE-2016-67475.5A denial of service vulnerability in Mediaserver in Android before 2016-11-05 could enable an attacker to use a specially crafted file to caCVE-2016-67485.5An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and soundCVE-2016-67495.5An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and soundCVE-2016-67505.5An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and soundCVE-2016-67515.5An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and soundCVE-2016-67525.5An information disclosure vulnerability in Qualcomm components including the GPU driver, power driver, SMSM Point-to-Point driver, and soundCVE-2016-67535.5An information disclosure vulnerability in kernel components, including the process-grouping subsystem and the networking subsystem, in AndrCVE-2016-67548.8A remote code execution vulnerability in Webview in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-05 could enable aCVE-2016-67557.0An elevation of privilege vulnerability in the Qualcomm camera driver could enable a local malicious application to execute arbitrary code wCVE-2016-67564.7An information disclosure vulnerability in Qualcomm components including the camera driver and video driver could enable a local malicious aCVE-2016-67574.7An information disclosure vulnerability in Qualcomm components including the camera driver and video driver could enable a local malicious aCVE-2016-67587.8An elevation of privilege vulnerability in Qualcomm media codecs could enable a local malicious application to execute arbitrary code within
CVE-2016-6746: Medium severity, CVSS 5.5 | Vulnix