CVE-2016-3858
published 2016-09-11CVE-2016-3858: Buffer overflow in drivers/soc/qcom/subsystem_restart.c in the Qualcomm subsystem driver in Android before 2016-09-05 on Nexus 5X and 6P devices allows…
PriorityP433high7.8CVSS 3.0
AVLACLPRNUIRSUCHIHAH
EPSS
0.53%
41.8th percentile
Buffer overflow in drivers/soc/qcom/subsystem_restart.c in the Qualcomm subsystem driver in Android before 2016-09-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application that provides a long string, aka Android internal bug 28675151 and Qualcomm internal bug CR1022641.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | <= 7.0 | — | |
| android | — | — |
CVSS provenance
nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
osv7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-6c4c-fp69-7pr6: Buffer overflow in drivers/soc/qcom/subsystem_restart
ghsa_unreviewed·2022-05-17
CVE-2016-3858 [HIGH] CWE-119 GHSA-6c4c-fp69-7pr6: Buffer overflow in drivers/soc/qcom/subsystem_restart
Buffer overflow in drivers/soc/qcom/subsystem_restart.c in the Qualcomm subsystem driver in Android before 2016-09-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application that provides a long string, aka Android internal bug 28675151 and Qualcomm internal bug CR1022641.
Kernel
include/linux/string.h: add the option of fortified string.h functions
kernel_security·2017-07-12·CVSS 7.8
CVE-2016-3858 [HIGH] include/linux/string.h: add the option of fortified string.h functions
include/linux/string.h: add the option of fortified string.h functions
This adds support for compiling with a rough equivalent to the glibc
_FORTIFY_SOURCE=1 feature, providing compile-time and runtime buffer
overflow checks for string.h functions when the compiler determines the
size of the source or destination buffer at compile-time. Unlike glibc,
it covers buffer reads in addition to writes.
GNU C __builtin_*_chk intrinsics are avoided because they would force a
much more complex implementation. They aren't designed to detect read
overflows and offer no real benefit when using an implementation based
on inline checks. Inline checks don't add up to much code size and
allow full use of the regular string intrinsics while avoiding the need
for a bunch of _chk functions and per-arch asse
OSV
CVE-2016-3858: Buffer overflow in drivers/soc/qcom/subsystem_restart
osv·2016-09-11·CVSS 7.8
CVE-2016-3858 [HIGH] CVE-2016-3858: Buffer overflow in drivers/soc/qcom/subsystem_restart
Buffer overflow in drivers/soc/qcom/subsystem_restart.c in the Qualcomm subsystem driver in Android before 2016-09-05 on Nexus 5X and 6P devices allows attackers to gain privileges via a crafted application that provides a long string, aka Android internal bug 28675151 and Qualcomm internal bug CR1022641.
Android
CVE-2016-3858: Android Security Bulletin 2016-09-01
CVE: CVE-2016-3858
Severity: HIGH
References: A-28675151
QC-CR#1022641
vendor_android·2016-09-01·CVSS 7.8
CVE-2016-3858 [HIGH] CVE-2016-3858: Android Security Bulletin 2016-09-01
CVE: CVE-2016-3858
Severity: HIGH
References: A-28675151
QC-CR#1022641
Android Security Bulletin 2016-09-01
CVE: CVE-2016-3858
Severity: HIGH
References: A-28675151
QC-CR#1022641
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://source.android.com/security/bulletin/2016-09-01.htmlhttp://www.securityfocus.com/bid/92873http://www.securitytracker.com/id/1036763https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=0c148b9a9028c566eac680f19e5d664b483cdee3http://source.android.com/security/bulletin/2016-09-01.htmlhttp://www.securityfocus.com/bid/92873http://www.securitytracker.com/id/1036763https://source.codeaurora.org/quic/la/kernel/msm-3.10/commit/?id=0c148b9a9028c566eac680f19e5d664b483cdee3
2016-09-11
Published