CVEvulnerability
CVE-2016-5864
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2017-08-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
In an audio driver function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, some parameters are from userspace, and if they are set to a large value, integer overflow is possible followed by buffer overflow. In another function, a missing check for a lower bound may result in an out of bounds memory access.
Affected configurations
• google android
Related
Weakness · not in database (1)
References
- http://www.securitytracker.com/id/1038623 Third Party Advisory, VDB Entry
- https://source.android.com/security/bulletin/2017-06-01 Patch, Vendor Advisory
- https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=cbc21ceb69cb7bca0643423a7ca982abce3ce50a Issue Tracking, Patch, Third Party Advisory
- http://www.securitytracker.com/id/1038623 Third Party Advisory, VDB Entry
- https://source.android.com/security/bulletin/2017-06-01 Patch, Vendor Advisory
- https://source.codeaurora.org/quic/la/kernel/msm-4.4/commit/?id=cbc21ceb69cb7bca0643423a7ca982abce3ce50a Issue Tracking, Patch, Third Party Advisory