CVE-2016-6694: Input Validation
sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via crafted parameter data, aka Qualcomm internal bug CR 1033525.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The issue is rated network-accessible with low attack complexity and requires no privileges or user interaction. Exploitation involves supplying crafted parameter data to the affected Qualcomm QDSP6v2 driver component.
What is the potential impact?
A successful attack can cause a denial of service. The available information also indicates possible unspecified additional impact, and the severity vector rates confidentiality, integrity, and availability impacts as high.
Which systems are affected?
The affected software is Google Android using the Qualcomm QDSP6v2 driver component containing sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c. Android releases before 2016-10-05 are identified as affected.