CVE-2016-6722

An information disclosure vulnerability in libstagefright in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Android ID: A-31091777.

• CWE-200

• http://www.securityfocus.com/bid/94143Third Party Advisory, VDB Entry
• https://android.googlesource.com/platform/frameworks/av/+/89c03b3b9ff74a507a8b8334c50b08b334483556Issue Tracking, Patch
• https://source.android.com/security/bulletin/2016-11-01.htmlVendor Advisory
• http://www.securityfocus.com/bid/94143Third Party Advisory, VDB Entry
• https://android.googlesource.com/platform/frameworks/av/+/89c03b3b9ff74a507a8b8334c50b08b334483556Issue Tracking, Patch
• https://source.android.com/security/bulletin/2016-11-01.htmlVendor Advisory

Published

Dec 13, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-6716An elevation of privilege vulnerability in the AOSP Launcher…
• CVE-2016-6717An elevation of privilege vulnerability in Mediaserver in An…
• CVE-2016-6718An elevation of privilege vulnerability in the Account Manag…
• CVE-2016-6719An elevation of privilege vulnerability in the Bluetooth com…
• CVE-2016-6720An information disclosure vulnerability in libstagefright in…
• CVE-2016-6721An information disclosure vulnerability in Mediaserver in An…
• CVE-2016-6723A denial of service vulnerability in Proxy Auto Config in An…
• CVE-2016-6724A denial of service vulnerability in the Input Manager Servi…
• CVE-2016-6725A remote code execution vulnerability in the Qualcomm crypto…
• CVE-2016-6726Unspecified vulnerability in Qualcomm components in Android …
• CVE-2016-6727The Qualcomm GPS subsystem in Android on Android One devices…
• CVE-2016-6728An elevation of privilege vulnerability in the kernel ION su…