CVE-2016-6680

CVE-2016-6680 describes a high-severity information disclosure vulnerability in the Qualcomm Wi-Fi driver affecting Android devices, specifically Nexus 5X and Android One, before the 2016-10-05 security update. An attacker can exploit this by crafting a malicious application that makes an iw_set_priv ioctl call, leading to the disclosure of sensitive information. The vulnerability has a CVSS v3 score of 7.8 (High), indicating a local attack vector with low complexity, requiring user interaction, and potentially leading to high confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.