CVEvulnerability
CVE-2016-5344
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2016-08-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-190
Description
Multiple integer overflows in the MDSS driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to cause a denial of service or possibly have unspecified other impact via a large size value, related to mdss_compat_utils.c, mdss_fb.c, and mdss_rotator.c.
Affected configurations
• google android (<= 7.0)
• linux linux kernel (>= 3.0 <= 3.19.8)
Related
Weakness · CWE (1)
- CWE-190 Integer Overflow or Wraparound weakness
References
- http://source.android.com/security/bulletin/2016-10-01.html Patch, Third Party Advisory
- http://www.securityfocus.com/bid/92695 Third Party Advisory, VDB Entry
- https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=1d2297267c24f2c44bd0ecb244ddb8bc880a29b7 Mailing List, Patch, Third Party Advisory
- https://www.codeaurora.org/integer-overflow-mdss-driver-cve-2016-5344 Broken Link
- http://source.android.com/security/bulletin/2016-10-01.html Patch, Third Party Advisory
- http://www.securityfocus.com/bid/92695 Third Party Advisory, VDB Entry
- https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=1d2297267c24f2c44bd0ecb244ddb8bc880a29b7 Mailing List, Patch, Third Party Advisory
- https://www.codeaurora.org/integer-overflow-mdss-driver-cve-2016-5344 Broken Link