CVE-2016-5347
published 2017-08-16CVE-2016-5347: In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel stack data can be leaked to userspace by an audio driver.
PriorityP420medium4.7CVSS 3.0
AVLACHPRNUIRSUCHINAN
EPSS
0.55%
42.1th percentile
In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel stack data can be leaked to userspace by an audio driver.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — | |
| qualcomm_inc | all_qualcomm_products | — | — |
CVSS provenance
nvdv3.04.7MEDIUMCVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
nvdv2.02.6LOWAV:N/AC:H/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Android
CVE-2016-5347: Android Security Bulletin 2017-05-01
CVE: CVE-2016-5347
Severity: MEDIUM
References: A-35394329
QC-CR#1100878
vendor_android·2017-05-01·CVSS 4.7
CVE-2016-5347 [MEDIUM] CVE-2016-5347: Android Security Bulletin 2017-05-01
CVE: CVE-2016-5347
Severity: MEDIUM
References: A-35394329
QC-CR#1100878
Android Security Bulletin 2017-05-01
CVE: CVE-2016-5347
Severity: MEDIUM
References: A-35394329
QC-CR#1100878
GHSA
GHSA-gm33-63vv-wrmp: In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel stack data can be leaked to userspace by an audio driver
ghsa_unreviewed·2022-05-17
CVE-2016-5347 [MEDIUM] CWE-200 GHSA-gm33-63vv-wrmp: In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel stack data can be leaked to userspace by an audio driver
In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel stack data can be leaked to userspace by an audio driver.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.securityfocus.com/bid/98218https://source.android.com/security/bulletin/2017-05-01https://source.codeaurora.org/quic/la//kernel/msm-4.4/commit/?id=f14390f13e62460fc6b05fc0acde0e825374fdb6https://www.codeaurora.org/uninitialized-channel-map-array-can-leak-data-user-space-qdsp6v2-driver-cve-2016-5347http://www.securityfocus.com/bid/98218https://source.android.com/security/bulletin/2017-05-01https://source.codeaurora.org/quic/la//kernel/msm-4.4/commit/?id=f14390f13e62460fc6b05fc0acde0e825374fdb6https://www.codeaurora.org/uninitialized-channel-map-array-can-leak-data-user-space-qdsp6v2-driver-cve-2016-5347
2017-08-16
Published