CVE-2016-5864: vulnerability in Qualcomm, Inc. All Qualcomm products
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.7%
In an audio driver function in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, some parameters are from userspace, and if they are set to a large value, integer overflow is possible followed by buffer overflow. In another function, a missing check for a lower bound may result in an out of bounds memory access.
Affected products
Qualcomm, Inc. · All Qualcomm productsRelated CVEs — Qualcomm, Inc. All Qualcomm products
In the same product, most dangerous first.