CVE-2016-6693: Input Validation
Published Oct 3, 2016
·Updated
sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via an invalid data length, aka Qualcomm internal bug CR 1027585.
Affected Software
2 affected components
Google Android<=7.0
Google Android
Event History
Oct 3, 2016
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityAffected Software
Oct 10, 2016
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
Does exploitation require authentication or user interaction?
No. The CVSS vector indicates network reachability, low attack complexity, no privileges required, and no user interaction required.
2
What level of impact could successful exploitation have?
The vulnerability can cause denial of service and may have other unspecified effects. Its CVSS metrics indicate potential high impact to confidentiality, integrity, and availability.