CVE-2016-5871
CriticalSummary
All Qualcomm products with Android releases from CAF using the Linux kernel have an integer overflow to buffer overflow vulnerability when loading an image file.
Risk Assessment
This vulnerability may lead to unauthorized system access or execution of malicious code, posing a serious threat to user data security.
Recommendation
It is recommended to update the software to the latest version that includes security patches addressing this vulnerability.
Other vulnerabilities in Produkty Qualcomm z Androidem od CAF korzystające z jądra Linux
See all- CVE-2017-11041High
All Qualcomm products with Android releases from CAF using the Linux kernel have an issue where an output buffer is accessed in one thread and can be potentially freed in another.
- CVE-2016-10387Critical
All Qualcomm products with Android releases from CAF using the Linux kernel may be vulnerable to an assertion that could be reachable in a handover scenario.
- CVE-2016-10381Critical
All Qualcomm products with Android releases from CAF using the Linux kernel are vulnerable to an issue where the UE can send unprotected MeasurementReports revealing UE location.
- CVE-2016-10380Critical
All Qualcomm products with Android releases from CAF using the Linux kernel are vulnerable to revealing the end user's (UE) location through unprotected MeasurementReports.
- CVE-2015-9062Critical
All Qualcomm products with Android releases from CAF using the Linux kernel have an integer overflow to buffer overflow vulnerability when loading an ELF file.
- CVE-2015-9054Critical
All Qualcomm products with Android releases from CAF using the Linux kernel may have a NULL pointer dereference issue during GAL decoding.
- CVE-2015-9053Critical
All Qualcomm products with Android releases from CAF using the Linux kernel have a buffer overflow vulnerability in the processing of certain responses from the USIM.
- CVE-2015-9050Critical
All Qualcomm products with Android releases from CAF using the Linux kernel have a vulnerability that allows for out of bounds array access during a CA call.
- CVE-2015-9048Critical
All Qualcomm products with Android releases from CAF using the Linux kernel have a vulnerability in the processing of lost RTP packets.
- CVE-2015-9043Critical
All Qualcomm products with Android releases from CAF using the Linux kernel may have a NULL pointer dereference issue upon timer expiry.
Original NVD description (English source)
In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow to buffer overflow vulnerability exists when loading an image file.