CVE-2016-3854
published 2016-08-06CVE-2016-3854: drivers/media/video/msm/msm_mctl_buf.c in the Qualcomm components in Android before 2016-08-05 does not validate the image mode, which allows attackers to…
PriorityP428high7.8CVSS 3.0
AVLACLPRNUIRSUCHIHAH
EPSS
0.39%
31.3th percentile
drivers/media/video/msm/msm_mctl_buf.c in the Qualcomm components in Android before 2016-08-05 does not validate the image mode, which allows attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted application, aka Qualcomm internal bug CR897326.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | <= 6.0.1 | — | |
| android | — | — |
CVSS provenance
nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Android
CVE-2016-3854: Android Security Bulletin 2016-08-01
CVE: CVE-2016-3854
Severity: HIGH
References: QC-CR#897326
vendor_android·2016-08-01·CVSS 7.8
CVE-2016-3854 [HIGH] CVE-2016-3854: Android Security Bulletin 2016-08-01
CVE: CVE-2016-3854
Severity: HIGH
References: QC-CR#897326
Android Security Bulletin 2016-08-01
CVE: CVE-2016-3854
Severity: HIGH
References: QC-CR#897326
GHSA
GHSA-mv8v-hr6w-hx3h: drivers/media/video/msm/msm_mctl_buf
ghsa_unreviewed·2022-05-17
CVE-2016-3854 [HIGH] CWE-125 GHSA-mv8v-hr6w-hx3h: drivers/media/video/msm/msm_mctl_buf
drivers/media/video/msm/msm_mctl_buf.c in the Qualcomm components in Android before 2016-08-05 does not validate the image mode, which allows attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted application, aka Qualcomm internal bug CR897326.
OSV
CVE-2016-3854: drivers/media/video/msm/msm_mctl_buf
osv·2016-08-06·CVSS 7.8
CVE-2016-3854 [HIGH] CVE-2016-3854: drivers/media/video/msm/msm_mctl_buf
drivers/media/video/msm/msm_mctl_buf.c in the Qualcomm components in Android before 2016-08-05 does not validate the image mode, which allows attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via a crafted application, aka Qualcomm internal bug CR897326.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://source.android.com/security/bulletin/2016-08-01.htmlhttp://www.securityfocus.com/bid/92256https://source.codeaurora.org/quic/la/kernel/msm/commit/?h=LA.AF.1.2.1_rb1.5&id=cc96def76dfd18fba88575065b29f2ae9191fafahttp://source.android.com/security/bulletin/2016-08-01.htmlhttp://www.securityfocus.com/bid/92256https://source.codeaurora.org/quic/la/kernel/msm/commit/?h=LA.AF.1.2.1_rb1.5&id=cc96def76dfd18fba88575065b29f2ae9191fafa
2016-08-06
Published