CVE-2016-5349

🗓️ 06 Apr 2017 19:00:00Reported by qualcommType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 44 Views

The HLOS lacked memory address verification, leading to potential privilege escalation

Reporter	Title	Published	Views	Family All 8
Android Security Bulletins	Android Security Bulletin—April 2017Stay organized with collectionsSave and categorize content based on your preferences.	3 Apr 201700:00	–	androidsecurity
CNVD	Google Nexus Qualcomm TrustZone Information Disclosure Vulnerability	18 Apr 201700:00	–	cnvd
Cvelist	CVE-2016-5349	6 Apr 201719:00	–	cvelist
EUVD	EUVD-2016-6300	7 Oct 202500:30	–	euvd
NVD	CVE-2016-5349	6 Apr 201719:59	–	nvd
OSV	UBUNTU-CVE-2016-5349	6 Apr 201719:59	–	osv
Prion	Privilege escalation	6 Apr 201719:59	–	prion
UbuntuCve	CVE-2016-5349	6 Apr 201719:59	–	ubuntucve

NVD

Node

google androidRange≤7.1.1

[
  {
    "product": "Qualcomm Snapdragon 800, 600, 400, 200",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "All Android releases from CAF using the Linux kernel."
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/97364
securitytracker	www.securitytracker.com/id/1038201
codeaurora	www.codeaurora.org/insufficient-memory-address-information-prevent-arbitrary-memory-access-qsee-secure-applications-cve
source	www.source.android.com/security/bulletin/2017-04-01
qualcomm	www.qualcomm.com/company/product-security/security-advisories