CVE-2016-0847

CVE-2016-0847 is a high-severity vulnerability affecting the Telecom Component in Android versions 5.0.x, 5.1.x, and 6.x prior to their respective April 2016 security updates. This flaw allows a malicious application, by gaining elevated permissions, to spoof the originating telephone number of a call. With a CVSS score of 8.4, it presents a high risk for confidentiality, integrity, and availability due to its low attack complexity and lack of required user interaction. There is no known active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this vulnerability.