CVE-2019-16007

CVE-2019-16007 describes a high-severity vulnerability in the inter-service communication of Cisco AnyConnect Secure Mobility Client for Android, specifically affecting versions prior to 4.7.04049. This flaw, stemming from implicit service invocations, allows an unauthenticated, local attacker to perform a service hijack or denial of service (DoS) by tricking a user into installing a malicious application. A successful exploit could lead to unauthorized access to confidential user information or render the AnyConnect application unusable. While rated with a CVSS score of 7.1 (HIGH), there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.