CVE-2016-3903

High

Published: 10/10/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The Qualcomm camera driver in Android before 2016-10-05 contains a vulnerability that allows attackers to gain privileges via a crafted application. This affects Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, and Android One devices.

Risk Assessment

This vulnerability may lead to unauthorized access to the system, posing a serious threat to user data security.

Recommendation

It is recommended to update the Android system to the latest version to mitigate this vulnerability and reduce the risk of attacks.

Other vulnerabilities in Qualcomm camera driver in Android

CVE-2016-3934High
The Qualcomm camera driver in Android before 2016-10-05 has a vulnerability related to the use of variable-length arrays. This allows attackers to gain privileges via a crafted application.

Original NVD description (English source)

drivers/media/platform/msm/camera_v2/sensor/csid/msm_csid.c in the Qualcomm camera driver in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, and Android One devices allows attackers to gain privileges via a crafted application, aka Android internal bug 29513227 and Qualcomm internal bug CR 1040857.