CVE-2016-6728

CVE-2016-6728 is a critical elevation of privilege vulnerability affecting the Android kernel's ION subsystem. A local malicious application could exploit this flaw to execute arbitrary code with kernel privileges, potentially leading to a permanent device compromise requiring a full operating system reflash. With a CVSS score of 7.8 (High), the vulnerability is easily exploitable with low attack complexity and user interaction. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage.