CVEvulnerability
CVE-2016-5863
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-08-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
In an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, several sanity checks are missing which can lead to out-of-bounds accesses.
Affected configurations
• google android
Related
Weakness · not in database (1)
References
- http://www.securityfocus.com/bid/99465 Third Party Advisory, VDB Entry
- https://source.android.com/security/bulletin/2017-07-01 Patch, Vendor Advisory
- https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=daf0acd54a6a80de227baef9a06285e4aa5f8c93 Issue Tracking, Patch, Third Party Advisory
- http://www.securityfocus.com/bid/99465 Third Party Advisory, VDB Entry
- https://source.android.com/security/bulletin/2017-07-01 Patch, Vendor Advisory
- https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=daf0acd54a6a80de227baef9a06285e4aa5f8c93 Issue Tracking, Patch, Third Party Advisory