CVE-2016-6760

CVE-2016-6760 is an elevation of privilege vulnerability in Qualcomm media codecs affecting Android devices running Kernel-3.10 and Kernel-3.18. A local malicious application could exploit this to execute arbitrary code within a privileged process. Rated High with a CVSS score of 7.8, this vulnerability allows an attacker to gain elevated capabilities not normally accessible to third-party applications. The attack requires local access and user interaction (UI:R), but is of low complexity. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal.