CVE Catalog

CVE-2016-5344

Critical
Published: Translated: NVD NIST

Summary

Multiple integer overflows in the MDSS driver for the Linux kernel 3.x, used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to cause a denial of service or possibly have unspecified other impact via a large size value.

Risk Assessment

Organizations may be exposed to attacks that lead to denial of service, potentially disrupting the operation of systems based on affected devices.

Recommendation

It is recommended to update the Linux kernel to the latest version to mitigate this vulnerability and to monitor systems for unusual activities.

Original NVD description (English source)

Multiple integer overflows in the MDSS driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to cause a denial of service or possibly have unspecified other impact via a large size value, related to mdss_compat_utils.c, mdss_fb.c, and mdss_rotator.c.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS