CVE-2016-5343
CriticalSummary
The QDSP6v2 Voice Service driver for Linux kernel 3.x has a vulnerability that allows attackers to cause a denial of service through memory corruption or potentially other unspecified impacts. This issue is demonstrated by a buffer overflow in the voice_svc_send_req function.
Risk Assessment
This vulnerability could lead to significant disruptions in the operation of MSM-based systems, affecting service availability and data security. Attackers may exploit this flaw to carry out denial of service attacks.
Recommendation
It is recommended to update the Linux kernel to the latest version that includes fixes for this vulnerability. Additionally, systems should be monitored for unauthorized access attempts.
Original NVD description (English source)
drivers/soc/qcom/qdsp6v2/voice_svc.c in the QDSP6v2 Voice Service driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a write request, as demonstrated by a voice_svc_send_req buffer overflow.