4.7 - CVE-2016-5855

Executive Summary

Informations
Name	CVE-2016-5855	First vendor Publication	2017-08-16
Vendor	Cve	Last vendor Modification	2017-08-18

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
Overall CVSS Score	4.7
Base Score	4.7	Environmental Score	4.7
impact SubScore	3.6	Temporal Score	4.7
Exploitabality Sub Score	1

Attack Vector	Local	Attack Complexity	High
Privileges Required	None	User Interaction	Required
Scope	Unchanged	Confidentiality Impact	High
Integrity Impact	None	Availability Impact	None
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:H/Au:N/C:P/I:N/A:N)
Cvss Base Score	2.6	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	High
Cvss Expoit Score	4.9	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

In a driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a user-supplied buffer is casted to a structure without checking if the source buffer is large enough.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5855

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-200	Information Exposure

CPE : Common Platform Enumeration

Type	Description	Count
Os	Google Android cpe:2.3:o:google:android::::::::	1

Sources (Detail)

Source	Url
BID	http://www.securityfocus.com/bid/98220
CONFIRM	https://source.android.com/security/bulletin/2017-05-01
MISC	https://source.codeaurora.org/quic/la//kernel/msm-4.4/commit/?id=a5edb54e93ba...

Alert History

If you want to see full details history, please login or register.

Date	Informations
2021-05-04 12:52:28	Multiple Updates
2021-04-22 02:04:33	Multiple Updates
2020-05-23 00:52:26	Multiple Updates
2017-08-18 21:23:54	Multiple Updates
2017-08-18 09:23:27	Multiple Updates
2017-08-17 09:23:36	Multiple Updates
2017-08-16 21:23:16	First insertion