CVE-2016-5863

Опубликовано: 16 авг. 2017

Источник: nvd

CVSS3: 7.8

CVSS2: 9.3

EPSS Низкий

Описание

In an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, several sanity checks are missing which can lead to out-of-bounds accesses.

Ссылки

http://www.securityfocus.com/bid/99465
Third Party Advisory
VDB Entry
https://source.android.com/security/bulletin/2017-07-01
Patch
Vendor Advisory
https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=daf0acd54a6a80de227baef9a06285e4aa5f8c93
Issue Tracking
Patch
Third Party Advisory
http://www.securityfocus.com/bid/99465
Third Party Advisory
VDB Entry
https://source.android.com/security/bulletin/2017-07-01
Patch
Vendor Advisory
https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=daf0acd54a6a80de227baef9a06285e4aa5f8c93
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:google:android:*:*:*:*:*:*:*:*

EPSS

Процентиль: 17%

0.00054

Низкий

7.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2016-5863

CVSS3: 7.8

ubuntu

больше 8 лет назад

In an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, several sanity checks are missing which can lead to out-of-bounds accesses.

GHSA-c3jv-xx3c-w254

CVSS3: 7.8

github

больше 3 лет назад

In an ioctl handler in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, several sanity checks are missing which can lead to out-of-bounds accesses.

BDU:2017-01987

fstec

около 9 лет назад

Уязвимость в обработчике функции ioctl мобильного приложения MSM для операционной системы Android, позволяющая нарушителю получить доступ за границами памяти

EPSS

Процентиль: 17%

0.00054

Низкий

7.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-264