CVE-2016-5347

In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel stack data can be leaked to userspace by an audio driver.

Score

CVSS 3.0 4.7 Medium

Status

Modified - product-security@qualcomm.com

Published

2017-08-16

Last modified

2024-09-17

Weaknesses

CWE-200

Affected products

• Android (Google)
• All Qualcomm Products (Qualcomm Inc.)

References

• http://www.securityfocus.com/bid/98218
• https://source.android.com/security/bulletin/2017-05-01
• https://source.codeaurora.org/quic/la//kernel/msm-4.4/commit/?id=f14390f13e62460fc6b05fc0acde0e825374fdb6
• https://www.codeaurora.org/uninitialized-channel-map-array-can-leak-data-user-space-qdsp6v2-driver-cve-2016-5347