Security Advisory

CVE-2016-6715

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2016-11-25 16:00:00

Last updated 2024-08-06 01:36:29

Assigner google_android

CVSS score not scored

State PUBLISHED

Description

An elevation of privilege vulnerability in the Framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could allow a local malicious application to record audio without the user's permission. This issue is rated as Moderate because it is a local bypass of user interaction requirements (access to functionality that would normally require either user initiation or user permission.) Android ID: A-29833954.

← Browse all CVEs View on cve.org ↗