CVE-2016-3905
HighSummary
The Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X devices has a vulnerability that allows attackers to gain privileges via a crafted application sending a SENDACTIONFRAME command.
Risk Assessment
Attackers can exploit this vulnerability to gain unauthorized access to the system, potentially leading to serious data security breaches.
Recommendation
It is recommended to update the Android system to a version after 2016-10-05 to mitigate this vulnerability and to monitor applications installed on Nexus 5X devices.
Other vulnerabilities in Qualcomm Wi-Fi driver in Android
See all- CVE-2016-6680High
The Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices has a vulnerability that allows attackers to obtain sensitive information via a crafted application making an iw_set_priv ioctl call.
- CVE-2016-6676High
An off-by-one error in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to gain privileges or cause a denial of service (buffer overflow) via a crafted application that makes a GET_CFG ioctl call.
- CVE-2016-6675High
An off-by-one error in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to gain privileges or cause a denial of service (buffer overflow) via a crafted application that makes a linkspeed ioctl call.
- CVE-2016-3874High
The Qualcomm Wi-Fi driver in Android before 2016-09-05 on Nexus 5X devices has a vulnerability related to improper validation of the arguments array. Attackers can gain privileges via a crafted application that sends a WE_UNIT_TEST_CMD command.
- CVE-2016-3792High
The Qualcomm Wi-Fi driver in Android before 2016-07-05 on Nexus 7 (2013) devices mishandles userspace data copying, allowing attackers to gain privileges via a crafted application.
- CVE-2014-9902Critical
Buffer overflow in the Qualcomm Wi-Fi driver in Android before 2016-08-05 on Nexus 7 (2013) devices allows remote attackers to execute arbitrary code via a crafted Information Element in an 802.11 management frame.
Original NVD description (English source)
CORE/HDD/src/wlan_hdd_main.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X devices allows attackers to gain privileges via a crafted application that sends a SENDACTIONFRAME command, aka Android internal bug 28061823 and Qualcomm internal bug CR 1001449.