CVE-2016-5860

High

Published: 16/08/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

In an audio driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, an integer overflow could occur when a function is called with a very large length, leading to a heap buffer overflow.

Risk Assessment

Heap buffer overflow may lead to unauthorized memory access, posing a risk of malicious code execution and potential system takeover.

Recommendation

It is recommended to update audio drivers to the latest version to mitigate the risks associated with this vulnerability.

Other vulnerabilities in Sterownik audio w produktach Qualcomm z systemem Android dla MSM, Firefox OS dla MSM lub QRD Android

CVE-2016-5864High
In an audio driver function in Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, there is a possibility of integer overflow leading to buffer overflow. Additionally, a missing lower bound check may result in out of bounds memory access.

Original NVD description (English source)

In an audio driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is called with a very large length, an integer overflow could occur followed by a heap buffer overflow.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS