CVE-2016-6696: Input Validation
sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c in a Qualcomm QDSP6v2 driver in Android before 2016-10-05 allows attackers to cause a denial of service or possibly have unspecified other impact via a large negative value for the data length, aka Qualcomm internal bug CR 1041130.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The vulnerability is rated network-accessible with low attack complexity and requires no privileges or user interaction. The available data does not identify the specific network-facing path used to reach the affected driver.
What systems are affected?
The issue affects Google Android systems containing the Qualcomm QDSP6v2 driver code before 2016-10-05. The affected source file is sound/soc/msm/qdsp6v2/msm-ds2-dap-config.c.
What is the impact of successful exploitation?
An attacker can cause a denial of service using a large negative data-length value. The advisory also states that unspecified additional impact may be possible.
How can I determine whether a device is vulnerable?
Check whether the device's Android/kernel source includes the Qualcomm QDSP6v2 msm-ds2-dap-config.c code and whether it contains the referenced fix commit c3c9341bfdf93606983f893a086cb33a487306e5. Devices with affected code before the 2016-10-05 fix date are in scope.