VULNERABILITY INTELLIGENCE

CVE-2016-5861

CVSS score8.8 HIGH

EPSS probability0.47%

CISA KEVNot currently listed

Published2017-08-16

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

In a display driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a variable controlled by userspace is used to calculate offsets and sizes for copy operations, which could result in heap overflow.

Primary references

product-security@qualcomm.com — Third Party Advisory, VDB Entry
product-security@qualcomm.com — Patch, Vendor Advisory
product-security@qualcomm.com — Issue Tracking, Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Patch, Third Party Advisory