CVE-2016-5347

2017-05-0100:00:00

qualcomm

www.cve.org

4.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.0%

JSON

In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel stack data can be leaked to userspace by an audio driver.

CNA Affected

[
  {
    "product": "All Qualcomm products",
    "vendor": "Qualcomm, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "All Android releases from CAF using the Linux kernel"
      }
    ]
  }
]

References

www.securityfocus.com/bid/98218

source.android.com/security/bulletin/2017-05-01

source.codeaurora.org/quic/la//kernel/msm-4.4/commit/?id=f14390f13e62460fc6b05fc0acde0e825374fdb6

www.codeaurora.org/uninitialized-channel-map-array-can-leak-data-user-space-qdsp6v2-driver-cve-2016-5347