$ cve CVE-2016-6727 JSON

CVE-2016-6727

9.8

CRITICAL · CVSS 3.0 · EPSS 2.7% (pctl 86)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

The Qualcomm GPS subsystem in Android on Android One devices allows remote attackers to execute arbitrary code.

CVSS	9.8 (CRITICAL, v3.0)
Vector	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS	2.73% — more likely to be exploited than 86% of all CVEs
Weakness	CWE-264
On CISA KEV	no
Public exploit	none known
Published	2017-04-17
Last modified	2026-06-17

Vendor	Product
google	android