CVE-2016-5344: Integer Overflow
First published: Tue Aug 30 2016(Updated: )
Multiple integer overflows in the MDSS driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to cause a denial of service or possibly have unspecified other impact via a large size value, related to mdss_compat_utils.c, mdss_fb.c, and mdss_rotator.c.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Google Android | <=7.0 | |
| Linux Linux kernel | >=3.0<=3.19.8 | |
| Google Android |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://source.android.com/security/bulletin/2016-10-01.html
- http://www.securityfocus.com/bid/92695
- https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=1d2297267c24f2c44bd0ecb244ddb8bc880a29b7
- https://www.codeaurora.org/integer-overflow-mdss-driver-cve-2016-5344
- https://source.codeaurora.org/quic/la/kernel/msm-3.18/commit/?id=64e15c36d6c1c57dc2d95a3f163bc830a469fc20
- https://source.android.com/docs/security/bulletin/2016-10-01 (Advisory)
- agent/references
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- agent/remedy
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/event
- agent/weakness
- agent/severity
- agent/author
- agent/tags
- agent/description
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/google
- canonical/google android
- version/google android/7.0
- vendor/linux
- canonical/linux linux kernel
- version/linux linux kernel/3.0
- version/linux linux kernel/3.19.8