PT-2017-8795 · Google+1 · Android+1

Published 2017-09-25 · Updated 2017-09-28 · CVE-2016-5868

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary code via a crafted application that compromises a privileged process. This is related to the Qualcomm networking driver, specifically the drivers/net/ethernet/msm/rndis ipa.c file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2016-5868

Affected Products

Android

Qualcomm Networking Driver

References · 5

• https://source.android.com/security/bulletin/2017-05-01 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-5868 · Security Note
• https://source.codeaurora.org/quic/la//kernel/msm-4.4/commit/?id=fbb765a3f813f5cc85ddab21487fd65f24bf6a8c · Patch
• https://osv.dev/vulnerability/CVE-2016-5868 · Vendor Advisory
• http://securityfocus.com/bid/98197 · Note