CVE-2016-6675
HighSummary
An off-by-one error in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to gain privileges or cause a denial of service (buffer overflow) via a crafted application that makes a linkspeed ioctl call.
Risk Assessment
This vulnerability may lead to privilege escalation or system crashes, posing a serious threat to the security of devices and user data.
Recommendation
It is recommended to update the Android system to the latest version to mitigate this vulnerability and to monitor applications installed on devices.
Other vulnerabilities in Qualcomm Wi-Fi driver in Android
See all- CVE-2016-6680High
The Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices has a vulnerability that allows attackers to obtain sensitive information via a crafted application making an iw_set_priv ioctl call.
- CVE-2016-6676High
An off-by-one error in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to gain privileges or cause a denial of service (buffer overflow) via a crafted application that makes a GET_CFG ioctl call.
- CVE-2016-3905High
The Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X devices has a vulnerability that allows attackers to gain privileges via a crafted application sending a SENDACTIONFRAME command.
- CVE-2016-3874High
The Qualcomm Wi-Fi driver in Android before 2016-09-05 on Nexus 5X devices has a vulnerability related to improper validation of the arguments array. Attackers can gain privileges via a crafted application that sends a WE_UNIT_TEST_CMD command.
- CVE-2016-3792High
The Qualcomm Wi-Fi driver in Android before 2016-07-05 on Nexus 7 (2013) devices mishandles userspace data copying, allowing attackers to gain privileges via a crafted application.
- CVE-2014-9902Critical
Buffer overflow in the Qualcomm Wi-Fi driver in Android before 2016-08-05 on Nexus 7 (2013) devices allows remote attackers to execute arbitrary code via a crafted Information Element in an 802.11 management frame.
Original NVD description (English source)
Off-by-one error in CORE/HDD/src/wlan_hdd_hostapd.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus 5X and Android One devices allows attackers to gain privileges or cause a denial of service (buffer overflow) via a crafted application that makes a linkspeed ioctl call, aka Android internal bug 30873776 and Qualcomm internal bug CR 1000861.