CVEvulnerability
CVE-2016-2062
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-05-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-190
Description
The adreno_perfcounter_query_group function in drivers/gpu/msm/adreno_perfcounter.c in the Adreno GPU driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, uses an incorrect integer data type, which allows attackers to cause a denial of service (integer overflow, heap-based buffer overflow, and incorrect memory allocation) or possibly have unspecified other impact via a crafted IOCTL_KGSL_PERFCOUNTER_QUERY ioctl call.
Affected configurations
• linux linux kernel (>= 3.0 <= 3.19.8)
• google nexus 5x firmware
• google nexus 6p firmware
Related
Weakness · CWE (1)
- CWE-190 Integer Overflow or Wraparound weakness
References
- http://source.android.com/security/bulletin/2016-06-01.html Patch, Vendor Advisory
- http://www.securitytracker.com/id/1035766 Third Party Advisory, VDB Entry
- https://codeaurora.org/cgit/quic/la/kernel/msm-3.18/commit/?id=27c95b64b2e4b5ff1288cbaa6e353dd803d71576 Mailing List, Patch, Third Party Advisory
- https://www.codeaurora.org/buffer-overflow-adreno-gpu-msm-driver-cve-2016-2062 Broken Link
- http://source.android.com/security/bulletin/2016-06-01.html Patch, Vendor Advisory
- http://www.securitytracker.com/id/1035766 Third Party Advisory, VDB Entry
- https://codeaurora.org/cgit/quic/la/kernel/msm-3.18/commit/?id=27c95b64b2e4b5ff1288cbaa6e353dd803d71576 Mailing List, Patch, Third Party Advisory
- https://www.codeaurora.org/buffer-overflow-adreno-gpu-msm-driver-cve-2016-2062 Broken Link