CVE-2016-5344 Multiple integer overflows in the MDSS driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to cause....
CriticalCVSS 9.8
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple integer overflows in the MDSS driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to cause a denial of service or possibly have unspecified other impact via a large size value, related to mdss_compat_utils.c, mdss_fb.c, and mdss_rotator.c.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Android | <= 7.0 | No fix listed |
| Linux kernel | >= 3.0, <= 3.19.8 | No fix listed |
References
- source.android.com patch third-party-advisory
- 92695 third-party-advisory vdb-entry
- source.codeaurora.org mailing-list patch third-party-advisory
- www.codeaurora.org broken-link
- Debian Security Tracker CVE-2016-5344 vendor-advisory