CVE-2016-2062: Buffer Overflow
The adrenoperfcounterquerygroup function in drivers/gpu/msm/adrenoperfcounter.c in the Adreno GPU driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, uses an incorrect integer data type, which allows attackers to cause a denial of service (integer overflow, heap-based buffer overflow, and incorrect memory allocation) or possibly have unspecified other impact via a crafted IOCTLKGSLPERFCOUNTERQUERY ioctl call.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-2062?
CVE-2016-2062 is classified as a moderate severity vulnerability due to its impact on device performance and potential for exploitation.
How do I fix CVE-2016-2062?
To fix CVE-2016-2062, you should update your kernel to a version that is patched against this vulnerability.
Which devices are affected by CVE-2016-2062?
CVE-2016-2062 affects the Linux kernel versions 3.0 to 3.19.8, including specific Android devices using Qualcomm Adreno GPU drivers.
What impact does CVE-2016-2062 have on affected systems?
CVE-2016-2062 could lead to performance issues and potential unauthorized access, making systems vulnerable to attacks.
Is CVE-2016-2062 exploitable remotely?
CVE-2016-2062 is not typically exploitable remotely but could be leveraged by a local attacker with the right circumstances.