CVE-2016-3792
HighSummary
The Qualcomm Wi-Fi driver in Android before 2016-07-05 on Nexus 7 (2013) devices mishandles userspace data copying, allowing attackers to gain privileges via a crafted application.
Risk Assessment
An attacker could exploit this vulnerability to gain elevated privileges on the system, posing a significant security risk to the device and user data.
Recommendation
It is recommended to update the Android system to a version after 2016-07-05 to mitigate this vulnerability and to monitor applications installed on the devices.
Other vulnerabilities in Qualcomm Wi-Fi driver in Android
See all- CVE-2016-6680High
The Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices has a vulnerability that allows attackers to obtain sensitive information via a crafted application making an iw_set_priv ioctl call.
- CVE-2016-6676High
An off-by-one error in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to gain privileges or cause a denial of service (buffer overflow) via a crafted application that makes a GET_CFG ioctl call.
- CVE-2016-6675High
An off-by-one error in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to gain privileges or cause a denial of service (buffer overflow) via a crafted application that makes a linkspeed ioctl call.
- CVE-2016-3905High
The Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X devices has a vulnerability that allows attackers to gain privileges via a crafted application sending a SENDACTIONFRAME command.
- CVE-2016-3874High
The Qualcomm Wi-Fi driver in Android before 2016-09-05 on Nexus 5X devices has a vulnerability related to improper validation of the arguments array. Attackers can gain privileges via a crafted application that sends a WE_UNIT_TEST_CMD command.
- CVE-2014-9902Critical
Buffer overflow in the Qualcomm Wi-Fi driver in Android before 2016-08-05 on Nexus 7 (2013) devices allows remote attackers to execute arbitrary code via a crafted Information Element in an 802.11 management frame.
Original NVD description (English source)
CORE/HDD/src/wlan_hdd_hostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-07-05 on Nexus 7 (2013) devices mishandles userspace data copying, which allows attackers to gain privileges via a crafted application, aka Android internal bug 27725204 and Qualcomm internal bug CR561022.