CVEvulnerability

CVE-2016-5347

4.7 MEDIUM Published 2017-08-16 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2017-08-16
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.0 ([email protected]): 4.7 MEDIUM — CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected]): 2.6 LOW — AV:N/AC:H/Au:N/C:P/I:N/A:N
Weaknesses: CWE-200

Description

In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel stack data can be leaked to userspace by an audio driver.

Affected configurations

• google android

Related

Weakness · CWE (1)

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References

http://www.securityfocus.com/bid/98218 Third Party Advisory, VDB Entry
https://source.android.com/security/bulletin/2017-05-01 Patch, Vendor Advisory
https://source.codeaurora.org/quic/la//kernel/msm-4.4/commit/?id=f14390f13e62460fc6b05fc0acde0e825374fdb6 Issue Tracking, Patch, Third Party Advisory
https://www.codeaurora.org/uninitialized-channel-map-array-can-leak-data-user-space-qdsp6v2-driver-cve-2016-5347 Patch, Third Party Advisory
http://www.securityfocus.com/bid/98218 Third Party Advisory, VDB Entry
https://source.android.com/security/bulletin/2017-05-01 Patch, Vendor Advisory
https://source.codeaurora.org/quic/la//kernel/msm-4.4/commit/?id=f14390f13e62460fc6b05fc0acde0e825374fdb6 Issue Tracking, Patch, Third Party Advisory
https://www.codeaurora.org/uninitialized-channel-map-array-can-leak-data-user-space-qdsp6v2-driver-cve-2016-5347 Patch, Third Party Advisory