PT-2016-5761

CVE-2016-3934

·

Published

2016-10-10

·

Updated

2016-11-28

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-10-05
Description The issue is related to the Qualcomm camera driver in Android, which relies on variable-length arrays. This allows attackers to gain privileges via a crafted application. The estimated number of potentially affected devices is not specified.
Recommendations For Android versions prior to 2016-10-05, update to a version released after 2016-10-05 to resolve the issue. As a temporary workaround, consider restricting access to the camera driver to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾