VULNERABILITY INTELLIGENCE

CVE-2016-5862

CVSS score7 HIGH

EPSS probability0.52%

CISA KEVNot currently listed

Published2017-08-16

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

When a control related to codec is issued from userspace in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, the type casting is done to the container structure instead of the codec's individual structure, resulting in a device restart after kernel crash occurs.

Primary references

product-security@qualcomm.com — Third Party Advisory, VDB Entry
product-security@qualcomm.com — Patch, Vendor Advisory
product-security@qualcomm.com — Issue Tracking, Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Patch, Third Party Advisory