CVE-2016-2065
HighSummary
The MSM QDSP6 audio driver for Linux kernel 3.x has a vulnerability that allows attackers to cause a denial of service through out-of-bounds writes. This can lead to memory corruption or other unspecified impacts.
Risk Assessment
Organizations using MSM devices may be vulnerable to attacks that result in system crashes or unexpected application behavior. Potential impacts may include loss of service availability.
Recommendation
It is recommended to update the Linux kernel to the latest version to mitigate this vulnerability and to monitor applications using this driver for potential attack attempts.
Other vulnerabilities in MSM QDSP6 audio driver for Linux kernel 3.x
See all- CVE-2016-2064High
The MSM QDSP6 audio driver for Linux kernel 3.x has a vulnerability that allows attackers to cause a denial of service (buffer over-read) or potentially unspecified other impact via a crafted application making an ioctl call specifying many commands.
- CVE-2016-2068High
The MSM QDSP6 audio driver for Linux kernel 3.x allows attackers to gain privileges or cause a denial of service via a crafted application performing AUDIO_EFFECTS_WRITE or AUDIO_EFFECTS_READ operations.
- CVE-2016-2066High
An integer signedness error in the MSM QDSP6 audio driver for Linux kernel 3.x allows attackers to gain privileges or cause a denial of service via a crafted application making an ioctl call.
Original NVD description (English source)
sound/soc/msm/qdsp6v2/msm-audio-effects-q6-v2.c in the MSM QDSP6 audio driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to cause a denial of service (out-of-bounds write and memory corruption) or possibly have unspecified other impact via a crafted application that makes an ioctl call triggering incorrect use of a parameters pointer.