CVE-2016-5343 drivers/soc/qcom/qdsp6v2/voice_svc.c in the QDSP6v2 Voice Service driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products...
CriticalCVSS 9.8
EPSS 3.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
drivers/soc/qcom/qdsp6v2/voice_svc.c in the QDSP6v2 Voice Service driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a write request, as demonstrated by a voice_svc_send_req buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux kernel | >= 3.0, <= 3.19.8 | No fix listed |
References
- source.android.com patch vendor-advisory
- 93330 third-party-advisory vdb-entry
- source.codeaurora.org mailing-list patch third-party-advisory
- www.codeaurora.org broken-link
- Debian Security Tracker CVE-2016-5343 vendor-advisory