CVE-2016-6587

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-01-08 · updated 2026-06-17
Weakness: CWE-200

Description

An Information Disclosure vulnerability exists in the mid.dat file stored on the SD card in Symantec Norton Mobile Security for Android before 3.16, which could let a local malicious user obtain sensitive information.

Affected products

Symantec Norton Mobile Security for Android: before 3.16 — fixed in 3.16

How to fix

Upgrade to a fixed version: Symantec Norton Mobile Security for Android 3.16. Check the vendor advisory for mitigations.

References

http://www.securityfocus.com/bid/93858
http://www.securitytracker.com/id/1037225
https://support.symantec.com/us/en/article.symsa1384.html
https://vuldb.com/?id.93273
http://www.securityfocus.com/bid/93858
http://www.securitytracker.com/id/1037225
https://support.symantec.com/us/en/article.symsa1384.html
https://vuldb.com/?id.93273

Get alerted when CVE-2016-6587 or the next vulnerability affects your stack