CVE-2016-5344

Multiple integer overflows in the MDSS driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to cause a denial of service or possibly have unspecified other impact via a large size value, related to mdss_compat_utils.c, mdss_fb.c, and mdss_rotator.c.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2016-08-30

Last modified

2024-08-06

Weaknesses

CWE-190

Affected products

• Android (Google)
• Linux Kernel (Linux)

References

• http://source.android.com/security/bulletin/2016-10-01.html
• http://www.securityfocus.com/bid/92695
• https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=1d2297267c24f2c44bd0ecb244ddb8bc880a29b7
• https://www.codeaurora.org/integer-overflow-mdss-driver-cve-2016-5344