CVE-2016-6676

Name of the Vulnerable Software and Affected Versions Qualcomm Wi-Fi driver versions prior to 2016-10-05

Description The issue is related to an off-by-one error in the CORE/HDD/src/wlan hdd cfg.c file of the Qualcomm Wi-Fi driver. This error can be exploited by attackers via a crafted application that makes a GET CFG ioctl call, potentially leading to a buffer overflow. As a result, attackers may gain privileges or cause a denial of service.

Recommendations For versions prior to 2016-10-05, update the Qualcomm Wi-Fi driver to a version released after 2016-10-05 to resolve the issue. As a temporary workaround, consider restricting access to the wlan hdd cfg.c file or disabling the GET CFG ioctl call functionality until a patch is available.