CVE-2016-6720

CVE-2016-6720 is an information disclosure vulnerability in the libstagefright component of Mediaserver, affecting Android versions 4.x through 7.0 prior to their November 2016 security updates. A local malicious application could exploit this to access sensitive data outside its granted permissions. Rated as Medium severity with a CVSS score of 5.5, the vulnerability requires user interaction (UI:R) and local access (AV:L) to achieve high confidentiality impact (C:H). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.