Vulnerability Description
In a sound driver in Android for MSM, Firefox OS for MSM, QRD Android, some variables are from userspace and values can be chosen that could result in stack overflow.
CVSS Score
7.0
HIGH
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Android | All versions |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/98170Third Party AdvisoryVDB Entry
- https://source.android.com/security/bulletin/2017-05-01PatchVendor Advisory
- https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=065360da714700Issue TrackingPatchThird Party Advisory
- http://www.securityfocus.com/bid/98170Third Party AdvisoryVDB Entry
- https://source.android.com/security/bulletin/2017-05-01PatchVendor Advisory
- https://source.codeaurora.org/quic/la//kernel/msm-3.18/commit/?id=065360da714700Issue TrackingPatchThird Party Advisory
FAQ
What is CVE-2016-5867?
CVE-2016-5867 is a vulnerability with a CVSS score of 7.0 (HIGH). In a sound driver in Android for MSM, Firefox OS for MSM, QRD Android, some variables are from userspace and values can be chosen that could result in stack overflow.
How severe is CVE-2016-5867?
CVE-2016-5867 has been rated HIGH with a CVSS base score of 7.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-5867?
Check the references section above for vendor advisories and patch information. Affected products include: Google Android.