CVE-2016-3901

High

Published: 10/10/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Multiple integer overflows in the Qualcomm cryptographic engine driver in Android before 2016-10-05 allow attackers to gain privileges via a crafted application.

Risk Assessment

This vulnerability may lead to privilege escalation, posing a serious threat to the security of devices and user data.

Recommendation

It is recommended to update Android to a version after 2016-10-05 to mitigate this vulnerability.

Other vulnerabilities in Qualcomm cryptographic engine driver in Android

CVE-2016-3935High
Multiple integer overflows in the Qualcomm cryptographic engine driver in Android before 2016-10-05 allow attackers to gain privileges via a crafted application.

Original NVD description (English source)

Multiple integer overflows in drivers/crypto/msm/qcedev.c in the Qualcomm cryptographic engine driver in Android before 2016-10-05 on Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 29999161 and Qualcomm internal bug CR 1046434.