PT-2016-1761 · Qualcomm+1 · Qualcomm Rf Driver+1

Jeff Vander Stoep · Published 2016-04-18 · Updated 2016-04-20 · CVE-2016-0844

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Android 6.x versions prior to 2016-04-01

Description The issue is caused by incorrect access restriction to socket ioctl calls in the Qualcomm RF driver of the Android operating system. This allows a local attacker to elevate privileges using a specially crafted application.

Recommendations For Android 6.x versions prior to 2016-04-01, consider restricting access to the vulnerable ioctl calls until a patch is available. As a temporary workaround, avoid using the vulnerable Qualcomm RF driver functionality until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2016-01087

CVE-2016-0844

Affected Products

Android

Qualcomm Rf Driver

References · 5

• http://source.android.com/security/bulletin/2016-04-02.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-01087 · Security Note
• https://osv.dev/vulnerability/CVE-2016-0844 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-0844 · Security Note
• https://android.googlesource.com/platform/external/sepolicy/+/57531cacb40682be4b1189c721fd1e7f25bf3786 · Note