CVE-2016-3934

High

Published: 10/10/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The Qualcomm camera driver in Android before 2016-10-05 has a vulnerability related to the use of variable-length arrays. This allows attackers to gain privileges via a crafted application.

Risk Assessment

This vulnerability may lead to privilege escalation, posing a serious threat to the security of devices and user data.

Recommendation

It is recommended to update Android to a version after 2016-10-05 and to monitor applications installed on devices to minimize risk.

Other vulnerabilities in Qualcomm camera driver in Android

CVE-2016-3903High
The Qualcomm camera driver in Android before 2016-10-05 contains a vulnerability that allows attackers to gain privileges via a crafted application. This affects Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, and Android One devices.

Original NVD description (English source)

drivers/media/platform/msm/camera_v2/sensor/io/msm_camera_cci_i2c.c in the Qualcomm camera driver in Android before 2016-10-05 on Nexus 5, Nexus 5X, Nexus 6, Nexus 6P, and Android One devices relies on variable-length arrays, which allows attackers to gain privileges via a crafted application, aka Android internal bug 30102557 and Qualcomm internal bug CR 789704.