CVE-2016-6720

An information disclosure vulnerability in libstagefright in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Android ID: A-29422020.

• CWE-200

• http://www.securityfocus.com/bid/94143Third Party Advisory, VDB Entry
• https://android.googlesource.com/platform/frameworks/av/+/0f177948ae2640bfe4d70f8e4248e106406b3b0aIssue Tracking, Patch
• https://android.googlesource.com/platform/frameworks/av/+/2c75e1c3b98e4e94f50c63e2b7694be5f948477cIssue Tracking, Patch
• https://android.googlesource.com/platform/frameworks/av/+/640b04121d7cd2cac90e2f7c82b97fce05f074a5Issue Tracking, Patch
• https://android.googlesource.com/platform/frameworks/av/+/7c88b498fda1c2b608a9dd73960a2fd4d7b7e3f7Issue Tracking, Patch
• https://source.android.com/security/bulletin/2016-11-01.htmlVendor Advisory
• http://www.securityfocus.com/bid/94143Third Party Advisory, VDB Entry
• https://android.googlesource.com/platform/frameworks/av/+/0f177948ae2640bfe4d70f8e4248e106406b3b0aIssue Tracking, Patch
• https://android.googlesource.com/platform/frameworks/av/+/2c75e1c3b98e4e94f50c63e2b7694be5f948477cIssue Tracking, Patch
• https://android.googlesource.com/platform/frameworks/av/+/640b04121d7cd2cac90e2f7c82b97fce05f074a5Issue Tracking, Patch
• https://android.googlesource.com/platform/frameworks/av/+/7c88b498fda1c2b608a9dd73960a2fd4d7b7e3f7Issue Tracking, Patch
• https://source.android.com/security/bulletin/2016-11-01.htmlVendor Advisory

Published

Dec 13, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-6714A remote denial of service vulnerability in Mediaserver in A…
• CVE-2016-6715An elevation of privilege vulnerability in the Framework API…
• CVE-2016-6716An elevation of privilege vulnerability in the AOSP Launcher…
• CVE-2016-6717An elevation of privilege vulnerability in Mediaserver in An…
• CVE-2016-6718An elevation of privilege vulnerability in the Account Manag…
• CVE-2016-6719An elevation of privilege vulnerability in the Bluetooth com…
• CVE-2016-6721An information disclosure vulnerability in Mediaserver in An…
• CVE-2016-6722An information disclosure vulnerability in libstagefright in…
• CVE-2016-6723A denial of service vulnerability in Proxy Auto Config in An…
• CVE-2016-6724A denial of service vulnerability in the Input Manager Servi…
• CVE-2016-6725A remote code execution vulnerability in the Qualcomm crypto…
• CVE-2016-6726Unspecified vulnerability in Qualcomm components in Android …