CVE-2016-6564

CVE-2016-6564 describes a privileged binary, /system/bin/debugs, found in various Android devices from manufacturers like BLU, Infinix, and DOOGEE, which performs unencrypted over-the-air (OTA) update checks and exhibits rootkit-like behavior. This vulnerability carries a CVSS score of 8.1 (High) due to its network attack vector, low attack complexity, and high potential for confidentiality, integrity, and availability impacts, as it allows for arbitrary command execution as root. Despite its high severity and media coverage, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage indicate significant attention to this issue at the time of its discovery.