CVE-2016-6684
N/A
Published: October 10, 2016 at 10:00 AM UTC
Updated: June 17, 2026 at 12:51 AM UTC
8 products affected across 1 vendorAndroidNexus 9Nexus 5
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.4%
Description
The kernel in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, Nexus 9, Nexus Player, and Android One devices allows attackers to obtain sensitive information via a crafted application, aka internal bug 30148243.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
google-nexus-5 (environment) · google-nexus-5x (environment) · google-nexus-6 (environment) · google-nexus-6p (environment) · google-nexus-9 (environment) · google-nexus-player (environment) · google-android-one (same device)
Android One· Googledevice
80%All versions
Nexus Player· Googledevice
80%All versions
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (2)
x_refsource_CONFIRMVendor Advisory
Source: [email protected]
http://source.android.com/security/bulletin/2016-10-01.htmlVDB Entryx_refsource_BIDThird Party Advisory
Source: [email protected]
http://www.securityfocus.com/bid/93326Quick Info
StatusMODIFIED
CWE
CWE-200
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card