CVE-2016-5349

🗓️ 06 Apr 2017 19:00:00Reported by qualcommType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 75 Views

The HLOS lacked memory address verification, leading to potential privilege escalation

Reporter	Title	Published	Views	Family All 13
Android Security Bulletins	Android Security Bulletin—April 2017Stay organized with collectionsSave and categorize content based on your preferences.	3 Apr 201700:00	–	androidsecurity
BDU FSTEC	Android Privilege Escalation	4 May 201700:00	–	bdu_fstec
CNVD	Google Nexus Qualcomm TrustZone Information Disclosure Vulnerability	18 Apr 201700:00	–	cnvd
Cvelist	CVE-2016-5349	6 Apr 201719:00	–	cvelist
EUVD	EUVD-2016-6300	7 Oct 202500:30	–	euvd
Mend	CVE-2016-5349	6 Apr 201719:00	–	mend
NVD	CVE-2016-5349	6 Apr 201719:59	–	nvd
osv_cve	CVE-2016-5349	6 Apr 201719:59	–	osv_cve
osv_ubuntu	UBUNTU-CVE-2016-5349	6 Apr 201719:59	–	osv_ubuntu
Prion	Privilege escalation	6 Apr 201719:59	–	prion

NVD

Vulners

Node

google androidRange≤7.1.1

[
  {
    "product": "Qualcomm Snapdragon 800, 600, 400, 200",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "All Android releases from CAF using the Linux kernel."
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/97364
securitytracker	www.securitytracker.com/id/1038201
codeaurora	www.codeaurora.org/insufficient-memory-address-information-prevent-arbitrary-memory-access-qsee-secure-applications-cve
source	www.source.android.com/security/bulletin/2017-04-01
qualcomm	www.qualcomm.com/company/product-security/security-advisories